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ABSTRACT 


This  fuel  control  analysis  was  undertaken  to  establish  cost- 
effective  recommendations  for  improving  the  design  life  and 
maintainability  of  Army  gas  turbine  engine  fuel  control  sys¬ 
tems.  Army  experience  indicates  that  problems  with  the  fuel 
control  account  for  10  to  13%  of  the  engine  malfunctions  and 
that  30  to  50%  of  the  fuel  control  removals  are  unjustified. 

Data  collected  during  the  study  indicates  that  failure  modes 
common  to  the  majority  of  all  present-day  fuel  controls  ac¬ 
count  for  about  25%  of  the  control  removals.  These  failure 
modes  included  susceptibility  to  air  and  fuel  contamination, 
fuel  seal  leaks,  wear  of  drive  splines,  and  improper  adjust¬ 
ments.  Insufficient  detailed  data  is  available  to  determine 
the  causes  for  removal  of  the  remaining  25%  of  the  fuel  con¬ 
trols.  Information  indicates  that  the  causes  are  random  and 
are  probably  associated  with  assembly  and  other  human  error 
related  problems. 

Design  studies  on  both  built-in  and  ground  support  types  of 
fault  isolation  devices  which  would  signal  when  a  control  re¬ 
moval  was  warranted  were  completed.  Ihese  studies  indicate 
that,  for  present-day  fuel  controls,  only  the  ground  support 
type  fault  isolation  system  which  can  be  shared  by  five  or  more 
aircraft  would  be  cost  effective.  In  consideration  of  future 
electronic  fuel  control  systems,  the  studies  show  that  built-in 
fault  isolation  can  be  cost  effective. 

Incorporation  of  the  recommended  design  improvements  for  al¬ 
leviating  failure  modes  offers  the  potential  for  future  fuel 
controls  to  meet  a  goal  of  providing  5000  hours  of  operation 
between  overhauls.  The  effective  use  of  fault  isolation  offers 
reduced  life-cycle  costs  and  increased  aircraft  availability. 
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INTRODUCTION 


Field  usage  data  on  various  Army  turboshaft  engines  indicated 
that  10  to  13  percent  of  the  confirmed  engine  failures  are  in 
the  fuel  control,  and  that  only  30  to  50  percent  of  the  con¬ 
trol  removals  were  verified  as  failures.  Present  production 
fuel  controls  cost  7  to  10  percent  of  the  total  engine  deliv¬ 
ery  price  to  the  Ar...y,  and  fuel  control  maintenance  consumes 
an  average  of  about  11  percent  of  the  man-hours  spent  on  the 
engine.  The  high  occurrence  of  unscheduled  and  unjustified 
fuel  control  removals  detracts  from  the  reliability  and  avail¬ 
ability  of  the  aircraft  and  substantially  increases  life-cycle 
costs . 

The  turbine  engine  fuel  control  reliability  and  maintainability 
analysis  reported  herein  was  undertaken  to  establish  recommen¬ 
dations  for  design  improvements  to  reduce  failure  modes  and 
fault  isolation  devices  to  reduce  unjustified  removals.  The 
study  was  conducted  in  three  phases. 

The  first  phase  was  directed  toward  identifying  and  analyzing 
fuel  control  system  generic  failure  modes  to  establish  design 
recommendations  for  eliminating  these  failures  in  present  and 
future  control  systems.  Information  on  control  failures  was 
obtained  from  available  Army  and  Navy  reports  and  from  surveys 
of  various  Army  agencies  and  fuel  control  users.  However, 
present  Army  and  Navy  reliability  and  maintainability  field 
data  retrieval  systems  and  overhaul  procedures  on  fuel  control 
do  not  provide  sufficiently  detailed  information  to  verify  the 
causes  for  removal.  Therefore,  it  was  necessary  to  rely  pri¬ 
marily  on  information  obtained  from  survey  discussions  and  in- 
house  experience  at  Chandler  Evans. 

The  major  failure  modes  identified  as  being  common  to  most 
fuel  controls  consist  of  malfunctions  due  to  air  and  fuel  con¬ 
tamination,  static  and  dynamic  seal  leaks,  drive  spline  wear, 
and  improper  adjustments. 
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The  second  phase  of  work  was  directed  toward  establishing  a 
cost-effective  fault  isolation  device  which  would  indicate 
when  a  control  removal  was  warranted.  Army  field  maintenance 
capabilities  on  fuel  controls  are  limited  to  making  speed  ad¬ 
justments  and  removing  and  replacing  the  fuel  control.  Conse¬ 
quently,  30  to  50%  of  the  removals  are  unjustified  based  on 
subsequent  depot  bench  test  experience. 

Ar.  effective  fault  isolation  device  will  significantly  reduce 
unjustified  removals  and  the  maintenance  man-hours  spent  in 
troubleshooting  controls.  Because  a  number  of  different  fault 
isolation  devices  of  varied  complexity  can  be  conceived,  sub¬ 
stantial  preliminary  work  was  done  to  establish  guidelines  for 
allowable  costs.  This  work  indicated  that  a  100%  effective 
fault  isolation  device  costing  about  12%  of  the  production 
price  of  the  fuel  control  is  the  cost-effective  break-even 
point.  The  studies  concluded  that  for  present-day  fuel  con¬ 
trols,  only  ground  support  type  fault  isolation  equipment 
shared  by  five  or  more  aircraft  would  be  cost  effective.  In 
considering  future  electronic  fuel  controls,  built-in  fault 
isolation  will  be  cost  effective.  This  is  possible  because 
signals  of  all  of  the  required  parameters  needed  for  fault 
isolation  are  available  in  an  electronic  control. 

The  third  phase  of  effort  was  carried  out  to  evaluate  the  po¬ 
tential  improvements  in  the  design  life  and  maintenance  re¬ 
quirements  of  a  typical  control  system  that  could  be  achieved 
by  incorporating  all  of  the  design  recommendations  for  reduc¬ 
ing  failure  modes  and  effective  use  of  a  fault  isolation 
device.  This  evaluation  indicates  that  the  design  life  of 
future  fuel  controls  can  meet  a  goal  of  5000  hours  of  operation 
between  overhauls. 
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The  Chandler  Evans  TA-2S  fuel  control  used  on  the  Lycoming 
T-53  engine  was  selected  for  this  detailed  evaluation  because 
more  data  was  available  on  this  control  than  on  any  other,  and 
it  is  the  most  prevalent  control,  in  quantity,  in  the  Army  in¬ 
ventory. 

The  fuel  controls  which  were  considered  in  this  study  include 
those  used  on  the  T53f  T55,  T63,  T73  and  T74  Army  turbosheft 
engines. 
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DISCUSSION 


FAILURE  MODE  ANALYSIS 


ine  purpose  of  this  part  of  the  program  was  to  identify  control 
system  faults,  so  that  design  studies  and  recommendations  could 
oe  made  to  increase  the  control  system  reliability  and  to  im¬ 
prove  maintainability  features. 


I uel  Control  Systems  Investigated 

To  understand  the  types  of  failures  which  exist  in  gas  turbine 
control  systems,  it  is  necessary  to  understand  the  basic  opera¬ 
tion  of  the  controls.  The  controls  of  the  T53,  T55  and  T73  are 
similar  in  principle.  These  are  hydromechanical  control  sys¬ 
tems  and  use  fuel  pressure  to  actuate  power  servos  for  comput¬ 
ing  the  allowed  fuel  flow.  The  controls  for  the  T63  and  T74 
are  pneumomechanical  systems  and  use  engine  compressor  air 
pressure  as  the  medium  for  computing  fuel  flow.  This  causes  a 
asic  difference  in  service.  In  the  systems  using  fuel  for 
servo  power,  the  fuel  can  be  filtered  to  provide  long  life  of 
the  control  system,  whereas  the  air  systems  cannot  be  filtered 
without  some  sacrifice  in  control  system  performance,  because 
the  pressure  drop  across  the  filter  varies  with  time  in  service. 

Fuel  Control  System  Descriptions 

The  following  is  a  description  of  the  basic  operation  of  each 
control  system  considered. 


T53  Engine  Control  -  Refer  to  Figure  1 

The  T53  engine  fuel  control  is  the  only  control  used  by  the 
Army  which  integrates,  into  one  package,  the  pumps  and  fuel 
control  system. 


The  package  contains  the  fuel  metering  elements  in  one 
housing  and  fuel  flow  computation  in  another  housing,  which 
is  bolted  to  the  fuel  metering  housing.  The  power  turbine 
governor  is  connected  to  the  hydromechanical  computer  and 
may  be  changed  separately  in  the  field. 
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The  functions  which  the  control  provides  are: 

1.  Power  turbine  speed  governor 

2.  Gas  generator  speed  governor 

3.  A  pilot-operated  manual  system 

4.  Acceleration  control  in  which  acceleration  fuel 
flow  is  controlled  as  a  function  of  N^,  and  p^ 

5.  Deceleration  control  using  the  same  engine  param¬ 
eters  as  for  acceleration 

6.  Transient  compressor  bleed  control.  This  function 
provides  control  of  compressor  surge  during  engine 
acceleration.  A  measure  of  (Wf/P2  accel  -  W^/P2 
steady  state)  is  used  to  modulate  the  compressor 
bleed  actuator. 

7.  Compressor  inlet  guide  vanes  are  positioned  as  a 
function  of  and  T2» 

The  basic  functions  are  represented  in  block  form  in  Fig¬ 
ure  2. 


■"i 
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Figure  2.  T53  Engine  Control  Block  Diagram. 
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Hydromechanical  Computer 


The  servo  is  a  position  servo  in  which  the  pilot's 
demand  is  compared  to  the  sensed  N-^  signal.  The 
speed  error  is  amplified  using  a  four-way  servo  valve 
operated  piston  with  position  feedback.  The  position 
of  the  piston  is  used  to  close  the  loop  on  the  servo. 

The  feedback  servo  translates  the  three-dimensional 
cam.  The  servo  is  a  force  feedback  system  so  that  cali¬ 
bration  adjustments  may  be  made  by  adjusting  internal 
spring  loads.  The  four-way  spool  valve  is  rotated  to 
minimize  hysteresis,  and  speed  is  sensed  by  conventional 
flyweights . 

The  3D  cam  is  rotated  as  a  function  of  T2  by  a  P-cymene 
filled  motor  bellows.  The  stroke  of  tLo  T2  motor  bel¬ 
lows  is  determined  by  fuel  temperature  compensated  by 
summation  with  another  bellows. 

The  N2  speed  computer  is  also  a  force  balance  servo. 

The  feedback  linkage  and  cam  include  a  variable  gain 
to  provide  dynamic  compensation  at  different  power 
levels.  The  Wp/P2  outputs  of  the  acceleration  schedule 
and  N2  governors  pass  through  a  "lowest  wins"  mech¬ 
anism.  This  signal  is  then  multiplied  by  P2  by  a  mul¬ 
tiplying  linkage.  The  P2  position  input  to  the  multi¬ 
plier  is  from  a  force  feedback  P2  servomechanism.  P2 
is  sensed  with  an  evacuated  bellows.  The  sleeve  of  the 
P2  servo  is  rotated.  The  output  of  the  multiplier 
positions  the  fuel  metering  valve. 

Fuel  metering  is  through  triangular  slots  cut  into  a 
cylindrical  valve.  As  the  metering  valve  is  stroked, 
the  areas  of  the  slots  vary  linearly. 

The  compressor  transient  bleed  valve  control  signal  is 
taken  from  the  3D  cam  and  varies  the  air  pressure  in 
the  engine  bleed  actuator  open  loop. 

The  compressor  inlet  guide  vane  schedule  is  also  taken 
from  the  3D  cam  through  a  hydraulic  servo  valve.  The 
IGV  actuator  is  engine  mounted,  and  its  position  is  fed 
back  to  the  control  to  null  the  servo  valve. 
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Fuel  Pumping  System 


Fuel  enters  the  system  through  a  76-micron  screen.  It 
is  then  passed  through  two  gear  pumps  driven  in  paral¬ 
lel  from  the  engine  gas  generator.  Each  gear  pump  is 
capable  of  providing  full  engine  fuel  flow.  The  fuel 
flows  from  the  pumps  through  check  valves  (3  psi)  which 
prevent  a  short  circuit  if  one  pump  fails.  The  fuel 
then  passes  through  the  main  fuel  filter.  This  com¬ 
prises,  in  one  assembly,  a  140-micron  screen  for  the 
main  fuel  flew  and  an  inner  paper  element  (25 -micron 
absolute  and  9-psi  bypass  valve)  to  provide  clean  high- 
pressure  fuel  to  actuate  all  the  computer  servos.  A 
check  valve  (24  psi)  is  the  next  component  in  line, 
which  ensures  that  the  servo  pressure  is  sufficiently 
high  when  operating  on  the  manual  system.  Fuel  then 
flows  into  the  main  metering  valve,  and  the  pressure 
drop  across  this  valve  is  held  essentially  constant  by 
a  bypassing  head  regulator.  The  head  across  the  meter¬ 
ing  valve  is  sensed  across  a  diaphragm  which,  if  the 
set  value  is  exceeded,  moves  to  bypass  fuel  to  the  pump 
inlet.  The  nominal  setting  for  the  head  regulator  is 
20  psid,  and  an  external  adjustment  is  provided  for 
different  fuel  types.  The  fuel  passes  through  another 
check  valve  (3.5  psi),  which  prevents  flow  reversal 
when  on  the  manual  system.  The  next  component  is  the 
foot  valve  which  is  referenced  to  computer  case  pressure 
(60  psid) ,  ensuring  that  there  is  always  enough  servo 
pressure  to  operate  the  servos  accurately  in  the  auto¬ 
matic  mode.  Fuel  then  flows  out  of  the  control  to  the 
engine  through  the  fuel  shutoff  valve.  The  pilot  lever 
input  allows  bypass  of  fuel  back  to  computer  case  pres¬ 
sure  during  normal  shutdown . 

The  manual  system  is  independent  of  the  automatic  sys¬ 
tem.  It  has  a  separate  head  regulator  (40  psid)  and 
metering  valve.  It  is  selected  by  operation  of  a  sole¬ 
noid  which  ports  fuel  through  the  manual  metering  valve, 
which  is  a  rectangular  orifice  cut  in  the  shaft  from 
the  pilot's  N-^  input.  This  gives  a  schedule  of  fuel 
flow  against  PLA.  At  high  altitude  it  is  necessary  to 
throttle  back  before  changing  over  to  manual  control  to 
avoid  over fueling.  The  manual  system  head  regulator 
also  incorporates  a  high-pressure  relief  valve  (850 
psi)  . 
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Field  Adjustments  Allowed  (T53) 


Ground  Idle 
Military  Power 

min  and  max  flow  stops 

T55  Engine  Control  -  Refer  to  Figure  3 

As  mentioned  previously,  the  T55  fuel  control  is  similar 
in  type  and  complexity  to  the  Chandler  Evans  TA-2S  (T53)  . 

The  differences  are  more  in  individual  company  design  pref¬ 
erences  than  fundamental  ones. 

The  control  provides : 

1.  Power  turbine  speed  governing,  N2  =  f(P2,  N2*' 

2.  Gas  generator  speed  governing,  =  f(P3»  T2,  N^*) 

3.  Acceleration  control  (Fuel  flow  is  controlled  as  a 
function  of  ,  T2  and  . ) 

4.  Deceleration  control  parameters  as  (3) 

5.  Transient  compressor  bleed,  bleed  =  f(W^/P3  accel, 
Wf/P3  steady  state) 

There  is  no  manual  or  variable  IGV  in  this  system.  An  IGV 
system  is  provided  on  the  T55-L-11  but  has  not  been  shown 
on  the  schematic.  No  IGVs  were  provided  on  earlier  en¬ 
gines.  It  is  not  necessary  to  provide  a  manual  system  since 
the  application  is  a  twin-engine  helicopter  in  which  single¬ 
engine  operation  can  sustain  flight. 

It  is  noted  that  the  T55  engine  uses  Wf/P3  as  the  control 
mode  as  compared  to  Wf/P2  for  the  T53.  The  advantages  and 
disadvantages  of  these  control  modes  are  enough  of  a  subject 
for  a  complete  study.  However,  the  Wf/P3  mode  tends  to  be 
self  compensating  for  engine  compressor  deterioration.  On 
the  acceleration  schedule,  as  the  compressor  deteriorates, 
the  surge  margin  reduces  and  a  W^/P3  schedule  would  inher¬ 
ently  provide  less  fuel  flow.  A  disadvantage  of  the  Wf/P3 
mode  is  that  it  provides  an  inner  feedback  loop  which  makes 
analysis  and  faultfinding  more  difficult. 
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Figure  3.  T55  Engine  Control  Schematic. 


The  other  main  differences  are  that  the  and  N2  servos 
are  three-way  valves  which  cost  less  to  produce  than  four¬ 
way  valves  but  require  half  area  actuator  pistons  which  are 
larger.  The  output  of  the  computer  is  to  position  levers 
which  operate  a  flapper  servo.  The  flapper  servo  then 
drives  the  fuel  metering  valve  through  a  P3  tangent  multi¬ 
plier  mechanism.  Flapper  servos  as  compared  to  spool 
valves  also  cost  less  to  produce  and  have  long  life,  but 
have  lower  pressure  gains  and  higher  steady-state  leakage. 
In  their  application  to  the  T55,  the  inputs  to  the  flapper 
are  positions,  and  hence  they  do  not  need  compensation  for 
variation  in  flapper  forces  due  to  variation  in  fuel  pres¬ 
sure.  The  metering  valve  is  linear;  that  is,  fuel  flow  is 
directly  proportional  to  stroke.  The  head  regulator  is  a 
bypassing  type  but  with  no  diaphragm  to  amplify  the  force, 
since  the  metering  head  is  higher  than  the  TA-2  (42  psi) . 
Maximum  metered  fuel  flow  is  in  the  order  of  2000  lb/hr. 

The  separately  mounted  fuel  pumping  unit  has  dual-element 
gear  pumps. 


Field  Adjustments  Allowed  (T55) 

Gas  generator  max  speed 
Ground  idle 

Fuel  type  (metering  head  Ap) 
Interstage  bleed  cutoff 
T63  Engine  Control  -  Refer  to  Figure  4 
The  functions  provided  by  the  T63  control  are: 


1. 

Power  turbine  speed  governing,  Wf  = 

f<V- 

C/P,  P3) 

2. 

Gas  generator  speed  governing,  = 

fu^*, 

P3) 

3. 

Acceleration  control,  =  f(N^,  P^) 

4. 

Deceleration  control,  =  f(N^,  P^) 
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Figure  4.  T63  Engine  Control  Schematic. 


The  power  turbine  governor,  gas  generator  control,  and  fuel 
pumps  are  three  separate  packages. 

Fuel  is  pumped  by  a  dual-element  gear  pump  and  is  metered 
by  a  slab  cut  valve.  The  metering  head  is  sensed  across  a 
diaphragm  which  operates  a  valve  to  bypass  fuel  flow  in 
excess  of  engine  demand  back  to  the  pump  inlet. 

The  computation  of  the  required  engine  fuel  flow  for  a 
given  flight  condition  is  performed  by  using  engine  com¬ 
pressor  air  as  the  computing  medium.  Air  is  taken  from  the 
engine  compressor  (p^)  through  a  barrier  filter  and  provided 
to  both  the  power  turbine  governor  and  the  gas  generator 
control.  The  function  of  both  the  gas  generator  and  the 
power  turbine  governor  is  to  control  the  pressure  drop 
across  a  pair  of  bellows  in  series.  One  bellows  is  used 
for  governing;  the  other,  for  acceleration  control.  The 
stroke  of  the  bellows  is  converted  to  metering  valve  stroke 
through  a  torsion  tube,  which  allows  a  fuel  to  air  seal 
without  the  use  of  a  dynamic  seal. 

The  power  turbine  governor  compares  the  force  of  a  fly¬ 
weight  system  with  a  spring  force.  The  difference  is  a 
measure  of  N2  speed  error  which  is  used  to  open  a  flapper 
valve.  This  causes  a  drop  in  pressure  on  a  diaphragm.  The 
diaphragm  has  a  rod  attached  to  it  which  is  actuated  through 
a  "lowest  wins'1  valve  from  the  gas  generator  governor  to 
reduce  fuel  flow  with  an  increase  in  power  turbine  speed. 

The  accumulator  and  the  check  valve  system  are  required  to 
attenuate  the  dynamic  characteristics  of  the  helicopter 
rotor  system. 

Gas  generator  governing  and  acceleration  control  operate 
in  a  similar  way  to  decrease  and  increase  fuel  flow  respec¬ 
tively. 

The  N^,  N2  governor  and  acceleration  act  on  the  downstream 
series  of  orifices;  the  upstream  pressure  being  ,  the 
bellows  senses  the  pressures  between  the  orifice  pair.  The 
result  is  that  the  N| ,  governor  and  acceleration  control 
operate  on  W  ,/P0  ratio  units. 
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Field  Adjustment  Allowed  (T63) 


Ground  idle 
maximum 

Start  derichment 
maximum 

T73  Engine  Control  -  Refer  to  Figure  5 

This  control  is  similar  to  the  T55  in  complexity.  It  is 
the  largest  of  the  Army  controls  (maximum  flow  in  the  order 


3600 

lb/hr)  .  The  functions  provided  by  the  fuel 

control 

1. 

Gas  generator  speed  governing,  W^.  = 

f(Nx*, 

P3} 

2. 

Acceleration  control,  Wf  =  f(N^,  P^) 

3. 

Deceleration  control,  =  f(N^,  P^) 

4. 

Power  turbine  speed  governing,  Wf  = 

* 

(N 

53 

C/P) 

5. 

Engine  starting  compressor  air  bleed 

The  general  operation  of  this  fuel  control  is  similar  to 
the  T55  engine  control  described  on  page  9.  The  main  dif¬ 
ferences  are: 

•  The  3D  cam  is  not  rotated  with  temperature  T 

•  The  metering  valve  driv^e  is  by  a  force  balance 
multiplier  with  P3  as  compared  to  a  tangent  multi¬ 
plier  for  the  T55  control. 

•  The  metering  head  regulator  is  servo  operated. 

Field  Adjustments  Allowed  (T73) 

Ground  idle 
maximum 
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T74  Engine  Control  -  Refer  to  Figure  6 

This  fuel  control  is  similar  to  the  T63  engine  control. 

The  only  functional  difference  is  that  the  acceleration 
schedule  is  biased  by  engine  compressor  inlet  temperature 
( )  .  The  control  functions  are: 

1.  Gas  generator  speed  governing 

2.  Acceleration  control 

3.  Deceleration  control 

4.  Propeller  speed  governing 

Field  Adjustments  Allowed  (T74) 

Ground  idle 
maximum 

maximum  (propeller  speed) 

Metering  valve  Ap  for 

a.  fuel  type 

b.  surge  margin 

Data  Procurement 

To  identify  control  system  failures,  a  survey  of  control  sys¬ 
tem  users  was  made.  The  information  received  was  in  the  form 
of  reports,  verbal  discussions,  and  fuel  control  R&M  data  com¬ 
puter  printouts.  An  example  of  computer  data  is  given  in 
Table  I.  This  is  taken  from  the  Navy's  3M  data  system.  The 
MTBF  and  MTBR  data  presented  does  not  necessarily  give  the 
relative  merits  of  the  controls  because  of  such  things  as: 
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Figure  6.  T74  Engine  Control  System. 


TABLE  I.  SUMMARY  OF  MAINTENANCE  &  RELIABILITY  DATA  SUPPLIED  BY  KAMAN 

(NAVY  3M  DATA  SOURCE) 

Reporting  Period  July  1969  to  July  1971 


Bell  UH-1E 
T53-L-11 


MTBF/MTBR 


33,894  Flight  Hours 
176/391  I  70.3 


Main  F/C  &  Pump  389/1767  8.5 

P.T.  Governor  3638/15460  4.0 


T53-L-13  Engine  272/428 
Ham  F/C  &  Pump  630/2994 

P.T.  Governor  1330/4790 


Failure  Modes  (Top  4) 


18%  improper  adjustments,  9%  dirty, 
7%  hot  starts,  7%  FOD 

51%  improper  adjustments,  11%  low 
power,  6%  fuel  leaks,  6%  failure  unk 

29%  impropei  adjustments,  25%  rpm 
fluctuation,  12%  improper  maint. 


7%  slow 


Bell  TH-57 

28,828  Flight  Hours 

T63  Engine 

1254/1923 

70.4 

26%  contain.,  17%  magnetic  plug, 

13%  failed  unk,  5%  hot  starts 

Main  F/C 

324/1373 

9.9 

56%  improper  adjustments,  12%  failed 

unk,  12%  fuel  leak,  5%  binding 

Pump 

489/930 

6.0 

78%  fuel  leaks,  7%  dirty,  3%  broken. 

3%  internal  failure 

Boeing  CH46D 
T58  Engine 

Main  F/C 

Pump 


100,361  Flight  Hours 
132/223  141.4 

912/3860  3.9 

5576/8363  2.2 


Main  F/C  &  Pump  I  780/2640  I 


Sikorsky  CH-53D  33,356  Flight  Hours 
T64  Engine  I  375/814  I  46.5 


Main  F/C 
Pump 

Mam  F/C  &  Pump 


130/629 


1235/5559  2.1 


18%  leaking,  12%  improper  adjust¬ 
ments,  7%  failed  unk,  7%  FOD 

37%  improper  adjustments,  19%  fuel 
leaks,  5%  internal  failure,  4%  worn 

44%  fuel  leaks,  11%  improper  maint., 
6%  improper  adjustment,  6%  fuel 
flow  incorrect 


20%  improper  adjustments,  10%  FOD, 

7%  binding,  7%  leaking 

66%  improper  adjustments,  5%  failed 
urk,  4%  fuel  leaks,  3%  internal  fail. 

33%  dirty,  15%  fuel  leaks,  11%  miss¬ 
ing  parts,  7%  improper  adjustments 


T53-L-11  Fuel  Control 

TA-2B, 

Chandler 

Evans 

T53-L-13  " 

TA-2S, 

Chandler 

Evans 

T63 

DP-D3, 

Bendix 

T58 

JFC26, 

Hamilton 

Standard 

T64 

JFC42 , 

Hami lton 

Standard 
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1.  Different  aircraft  usage.  Short-duration  flights  with 
many  cycles  of  operation,  compared  to  longer,  steady 
cruises . 

2.  Different  environments 

3.  Variation  in  maintenance  personnel  ability  and  report¬ 
ing  efficiency 

It  is  also  to  be  noted  that  the  reliability  of  the  engine  re¬ 
flects  in  the  reliability  of  the  control.  A  low  MTBR  for  an 
engine  will  tend  to  increase  the  MTBR  for  the  control.  For  ex¬ 
ample,  a  MTBR  of  223  hours  for  the  T58  engine  on  the  Boeing 
CH-46D  during  100,361  flight  hours  introduces  450  new  engines 
and  controls  (100,361/223)  compared  to  only  50  new  engines  and 
controls  (21,500/428)  for  the  T53  engine  on  the  Bell  AH-lG. 

Considering  the  reporting  system  itself,  the  Navy's  3M  data 
system  represents  what  is  typically  available  on  the  recording 
of  fuel  control  R&M  field  data.  The  reporting  of  failures  is 
limited  to  the  selection  of  one-  and  two-word  codes  to  define  a 
cause  for  removal  (81  out  of  201  codes  available  apply  to  hydro¬ 
mechanical  fuel  controls) .  Also,  causes  of  failure  reported  in 
the  field  are  not  verified.  For  this  reason,  many  removals  are 
reported  as  improper  adjustments,  and  the  emphasis  for  obtain¬ 
ing  failure  data  in  the  program  relied  upon  surveying  users  and 
fuel  control  overhaul  facilities. 

Table  II  shows  a  more  detailed  breakdown  of  the  T53  control 
system  faults.  This  data  is  the  result  of  work  done  by  Chand¬ 
ler  Evans,  initiated  by  Trouble  Failure  Reports  (TFR's)  covering 
the  period  January  1969  to  January  1972. 

Generic  Failures 


The  most  useful  data  for  this  part  of  the  program  came  from 
verbal  opinions  taken  in  the  survey.  This  resulted  in  the 
definition  of  the  following  generic  failure  modes: 
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TABLE  II.  TA-2  CONTROL  UNSCHEDULED  MAINTENANCE 
Period  Covering  1/1/69  to  1/1/72 


Total  Maintenance  Actions 

1392 

Inconclusive  (cause  unknown) 

555 

Reported  Actions 

837 

FAILURES  NOT  AFFECTING  ENGINE  PERFORMANCE 

(DIRECTLY) 

Sy mp  tom 

%  of  Confirmed 
Failures 

No  Defect  Found 

20.0 

Leakage 

18.5 

Wear 

12.5 

Emergency  System  (backup) 

12.6 

Total 

63.6 

FAILURES  DIRECTLY  AFFECTING  ENGINE  PERFORMANCE 


Order 


Symptom 


Accel.  Fuel  Flow  High 
Accel.  Fuel  Flow  Low 
Out  of  Adjustment  (limits) 
Incorrect  Starting  Fuel  Flow 
Inconclusive  Symptoms 
Loss  of  N2  Control  Only 
P3  Air  Bleed  Incorrect 

Total 


36.4 
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1. 


Wear  -  major  wear  in  drive  splines  and  couplings; 
minor  wear  in  computing  elements 

2.  Contamination  of: 

a.  Air  -  with  oil  and  atmospheric  pollution  in  pneu¬ 

matic  systems 

b.  Fuel  -  contamination  introduced  into  the  aircraft 

fuel  tanks  and  left  in  the  fuel  control 
during  assembly 

3.  Incorrect  Adjustments/Tampering  With  Adjustments 

4.  Seal  Leakage  -  internal  and  external 

The  order  of  the  magnitude  of  these  problems  as  a  percentage 
of  confirmed  fuel  control  failures  is: 


Wear 

12% 

Contamination 

10% 

Incorrect  Adjustments 

20% 

Leakage 

15% 

These  are  the  major  problem  areas  which,  if  eliminated,  would 
significantly  improve  the  control  system  life.  The  remaining 
43%  are  failures  of  a  random  nature;  for  example, 

Human  errors  -  incorrect  assembly,  maintenance,  transport¬ 
ation,  manufacture 

Defective  materials  -  porous  castings,  material  flaws, 

cracks 

Calibration  errors  -  random  cases  where  the  control 

errors  may  be  biased  to  one  side  co¬ 
inciding  with  an  engine  whose  perform¬ 
ance  is  also  biased 

Incorrect  control  rigging 
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A  specific  requirement  of  the  program  was  to  investigate  con¬ 
trol  faults  previously  experienced  by  the  Army. 

1.  Sensors  and  compensating  servos 

2.  Fuel  contamination 

3 .  Wear  -  computing  elements 

4.  Wear  -  drive  couplings 

5.  External  leakage 

6.  Wear  or  failure  of  flexible  drive  shafts 

7.  Fracture  or  deformation  of  control  attachment  hardware 

8.  Lack  of  fault- isolation  hardware 

9.  Other  fuel  control  problems 

Item  1  was  not  found  to  be  a  problem  common  to  all  controls  in 
general,  and  will  be  discussed  as  a  specific  problem  in  the 
T53  control  history. 

Items  2,  3,  4  and  5  were  confirmed  as  being  failure  mechanisms 
common  to  all  controls. 

Flexible  drive  shafts  (Item  6)  were  confirmed  to  be  a  problem 
area.  The  main  problem  is  excessive  wear  resulting  in  dra.ve 
failure.  A  secondary  problem  is  binding,  which  results  in  un¬ 
stable  power  turbine  speed. 

Item  7  was  not  reported  in  the  survey  as  being  a  problem  area. 

Fault  isolation  (Item  8)  is  discussed  in  the  second  section  of 
this  report. 

The  generic  failures  identified  -  wear,  contamination,  incor¬ 
rect  adjustments,  and  fuel  leakage  -  were  studied  in  detail 
with  reference  to  the  T53  engine  control  since  this  control 
represents  66%  of  the  total  gas  turbine  fuel  controls  in  active 
Army  service. 


22 


Detailed  Study  of  Generic  Failures  (Applied  to  T53  Engine 
Control ) 


1.  Wear 


Wear  is  the  general  term  for  the  complex  phenomenon 
of  deterioration  of  surfaces  in  use.  It  may  be 
divided  into  more  commonly  understood  types  of  wear 
as  follows: 

a.  Abrasion  -  The  wear  produced  by  the  shearing 
action  between  surface  irregularities  or  for¬ 
eign  particles  in  continuous  motion. 

b.  Adhesion  (galling,  scuffing,  scoring,  seizing)  ■ 
The  wear  caused  by  welding  of  irregularities, 
resulting  in  local  projections  and  cavities, 
which  in  turn  can  cause  further  damage. 

c.  Fretting  -  Small  reciprocating  motion  causing 
surface  failure  due  to  fatigue.  This  is  often 
accompanied  by  corrosion  because  the  wear 
removes  the  natural  protection  of  corrosion 

on  the  surface  and  hence  a  cycle  of  wear- 
corrosion-wear  is  produced  which  removes  mater¬ 
ial  rapidly. 

d.  Contact  Stress  Fatigue  (Pitting)  -  The  dynamic 
application  of  load  which  causes  fatigue  fail¬ 
ure  at  the  surface  due  to  high-hertz  stresses. 
The  failures  are  seen  as  local  pitting,  and  the 
loose  particles  may  cause  further  damage  by 
abrasion. 

e.  Galvanic  Corrosion  -  The  electrical  depositing 
of  material  due  to  dissimilar  materials. 

Temperature  Effect 

In  addition  to  the  above  wear  categories,  the  gen¬ 
eral  effect  of  an  increase  in  material  temperature 
is  to  increase  the  wear  rate  by  reducing  the  mater¬ 
ial  hardness  and  corrosion  resistance. 
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Drive  Spline  Wear 


The  area  of  wear  which  has  the  most  serious  effect 
on  control  systems  is  in  drive  splines.  The  wear 
is  usually  in  the  form  of  combinations  of  abrasion 
and  fretting  corrosion.  Design  guidelines  are  to 
minimize  surface  stresses  and  drive  eccentricities 
and  provide  well-filtered  liquid  lubrication.  The 
spline  teeth  should  be  of  a  hard  material  and  be 
chromium  plated  to  provide  corrosion  resistance  and 
minimum  friction.  The  purpose  of  providing  liquid 
lubrication  as  compared  to  oil  mist  is  to  minimize 
corrosion  in  the  area  inaccessible  to  oil  mist, 
where  fretting  corrosion  would  normally  take  place. 

Areas  of  drive  shaft  wear  on  the  T53  control  are 
shown  in  Figure  7  for  the  main  fuel  control  drive 
and  in  Figure  8  for  the  power  turbine  governor 
drive.  The  most  severe  wear  area  is  the  main  drive 
spline  (Item  1,  Figure  9) .  Originally  this  spline 
was  Nitralloy  (AMS  6470)  and  was  run  dry.  This  re¬ 
sulted  in  a  high  frequency  of  worn  splines.  The 
shaft  material  was  changed  to  Nitralloy  AMS  6475 
and  was  lubricated  with  oil  mist. 

The  problem  with  Nitralloy  is  that  the  white  layer 
(iron  nitride)  formed  during  nitriding  causes  the 
chromium  plate  to  flake  off,  allowing  fretting 
corrosion  to  take  place.  Complete  removal  of  the 
white  layer  from  a  spline  is  difficult  and  cannot 
be  successfully  inspected. 

This  problem  is  illustrated  in  Figure  9.  An  ex¬ 
ample  of  a  worn  spline  was  sectioned  and  found  to 
have  0.0004  inch  of  white  layer  with  only  particles 
of  chromium  remaining  on  the  surface.  The  other 
example  shows  a  drive  shaft  which  had  been  used  in 
the  field  and  did  not  show  signs  of  wear.  This 
spline  had  no  white  layer  and  the  chromium  plate 
was  still  in  place. 


24 


Figure  7.  Main  Fuel  Control  Drive. 
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Figure  8.  Power  Turbine  Governor  Drive. 
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CHROMIUM  PLATE  (NO  WHITE  LAYER) 


WORN  SPLINE  FLANK 

SURFACE  HARDNESS  -  15  N  93.5 
CORF  HARDNESS  -  Rc  42 
NITRIDED  CASE  DEPTH  -  .017" 


UNWORN  SFLINE  FLANK 
SURFACE  HARDNESS  -  15  N  93 
CORE  HARDNESS  -  Rc  4 1 
NITRIDED  CASE  DEPTH  -  .017" 


AREA  SHOWN  MAGNIFIED 


D1 RECTI 


ON  OF  DRIVE 


Figure  9.  Spline  Wear  Problem. 
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It  has  been  demonstrated  by  150  hours  of  engine  run 
ning  at  Avco  Lycoming  that  a  better  solution  to  the 
drive  spline  wear  problem  is  to  use  Greek  Ascaloy 
(AMS  5616)  chromium  plate. 

and  N2  Drive  Coupling  Wear 

The  N-^  and  N2  flyweight  drives  are  Oldham  couplings 
(N2  shown  in  Figure  8)  and  are  subject  to  high- 
frequency  small-amplitude  rubbing  between  the  coup¬ 
ling  drive's  surfaces.  This  results  in  fretting. 

2.  Contamination 


It  is  believed  that  many  failures  reported  in  the 
field  as  system  faults  are  often  caused  by  contami¬ 
nation;  for  example,  high  fuel  flow,  low  fuel  flow, 
out  of  specification,  and  erratic  behavior. 

Contamination  of  Air 

Pneumatic  controls  are  used  in  T63  and  T74  engines. 
Flowing  engine  compressor  air  is  used  for  computa¬ 
tion  and  actuation  power.  This  introduces  oil  and 
atmospheric  contaminants  into  control  orifices  and 
check  valves  to  the  extent  that  they  sometimes  clog 
The  areas  affected  are  the  N-^  and  N2  governor  ori¬ 
fices,  acceleration  orifice,  orifices  upstream  of 
the  governor  and  acceleration  bellows,  and  two 
check  valves  used  in  dynamic  compensation  of  the 
power  turbine  governor.  The  air  cannot  be  filtered 
without  sacrificing  fuel  control  performance.  The 
pressure  drop  across  the  filter  introduces  an  error 
in  fuel  flow  directly  proportional  to  the  filter 
pressure  drop.  The  error  will  increase  with  addi¬ 
tional  time  of  operation. 

Contamination  of  Fuel 

Contamination  of  fuel  has  two  effects;  it  limits 
the  life  of  components  by  producing  abrasive  wear, 
and  it  degrades  control  and  engine  burner  nozzle 
performance . 
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Currently  the  finest  barrier  filters  commonly  used 
are  10|x  nominal  (l|i  =  0.000039  inch)  which  gives 
an  absolute  rating  of  25 (i.  Using  MIL-E-8593B  as 
the  standard  for  contamination  distribution,  a  25p. 
absolute  filter  would  allow  82%  of  the  total  con¬ 
taminant  weight  to  pass  through  to  the  fuel  control 
and  burner  nozzles. 

Much  work  on  the  contamination  of  hydraulic  systems 
has  been  done,  and  experience  indicates  that  the 
filtration  rating  provided  must  be  less  than  the 
system  clearances  to  minimize  abrasive  wear. 
Applying  this  criterion  to  gas  turbine  controls,  a 
spool  valve  has  a  typical  radial  clearance  of 
0.00015  to  .00025  inch  or  4  to  6p;  a  system  filter 
of  3p  absolute  is  therefore  required. 

A  summary  of  the  benefits  to  be  gained  from  finer 
filtration  is  as  follows: 

a.  Longer  life  components,  hence  increased  time 
between  overhauls. 

b.  Increased  reliability,  by  the  elimination  of 
problems  such  as  erratic  behavior,  stuck  valves, 
etc. 

c.  Minimized  silting  forces  on  servos,  resulting 
from  smaller  controls. 

d.  Reduced  erosion  of  housings,  orifices,  burners. 

e.  Better  system  performance  (long-term  accuracy 
and  stability)  . 

The  penalty  for  these  advantages  is  higher  fre¬ 
quency  of  filter  replacement,  higher  filter  costs, 
and  larger  filters.  For  example,  a  barrier  filter 
sized  for  the  T53  engine  would  be  3  inches  in  di¬ 
ameter  by  8  inches  long,  based  on  a  fuel  flow  of 
600  lb/hr,  Ap  =  10  psi  and  a  filter  life  of  20  hours 
or  40  flights  (fuel  contaminated  to  MIL-E-8593B)  . 
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The  following  is  a  brief  survey  of  applications 
of  fine  filters  already  in  use: 

Engine 


Manufacturer 

Enqine 

Application  and  Comments 

Lycoming 

ATAGS-T55 

3p.  absolute,  on  oil  system 

P&W 

JT8D 

Oil  system  filter, 
recently  used 

TF30 

Oil  system  filter 
(3-1/8"  dia.  x  6-1/2"  long) 

P&W 

T74 

3p.  absolute  filter  for 

filtering  compressor  air 
for  the  pneumatic  fuel 
control  system 
(1"  dia  x  2-1/4"  long) 

Williams  WR27  (APU)  3p.  absolute,  on  oil 

system 

3p,  absolute,  on  fuel 
system  to  eliminate  sludge 
problem  which  25|i  filter 
did  not  cure 

3 .  Incorrect  Adjustments/Tampering  With  Adjustments 

It  was  reported  during  the  survey  of  control  sys¬ 
tem  failure  modes  that  incorrect  adjustments  and 
tampering  with  adjustments  are  major  problems. 
However,  the  allowed  field  adjustments  for  the 
T53,  T55,  T63,  T73  and  T74,  while  affecting  the 
engine  performance,  do  not  disturb  the  basic  cali¬ 
bration  of  the  fuel  control.  Adjustments  which 
are  critical  to  the  calibration  of  the  control 
usually  have  lead  seals,  and  in  some  instances 
"torque  paint"  is  used  on  joints  and  screws  which 
shows  cracking  if  these  components  are  disturbed. 

The  problem  could  be  reduced  in  magnitude  if  all 
external  adjustments  which  are  used  for  control 
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calibration  were  positioned  so  that  when  the  con¬ 
trol  is  mounted  on  the  engine,  the  adjustments  are 
inaccessible.  For  future  controls,  the  only  com¬ 
plete  solution  is  to  provide  no  adjustments. 

4 .  Seal  Leakage 


The  most  important  leakage  problem  is  external  fuel 
leaks  from  the  pilot's  input  to  the  control.  The 
leaks  can  be  sufficiently  high  to  be  a  safety 
hazard.  The  general  requirements  for  this  seal 
are : 


Temt  erature  range  -65°  to  250°F 

(350°F  for  the  future) 


Pressure 


usually  relatively  low, 
200  to  300  psi 


Velocity 


usually  low,  typically 
0 . 1  ft/sec 


Cycles  for  a  5000-hr  TBO,  15,000 

cycles  of  flight  condi¬ 
tions  or  100,000  cycles 
in  laboratory  conditions 

Shelf  life  no  aging  restrictions 


There  is  no  material  currently  available  which 
meets  all  of  these  requirements.  The  following  is 
a  list  of  current  materials  and  their  weaknesses: 


Buna  N  -  meets  the  temperature  range,  pressure  and 
velocity  requirements.  However,  it  rends  to  go 
brittle  with  time.  The  time  that  it  takes  to  go 
brittle  in  the  field  varies  from  100  hours  to  many 
thousands  of  hours  depending  on  the  environment. 
The  material  hardens  both  in  fuel  and  in  air. 


Fluorocarbon  -  is  brittle  at  low  temperatures. 
Fluorosilicone  -  has  very  poor  wear  resistance. 
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Polytetrafluoroethylene  -  flows  under  load,  other¬ 
wise  it  satisfies  all  other  requirements. 

The  results  of  this  information  indicate  that 
new  sea],  materials  or  improved  seal  designs  are 
required.  A  preliminary  survey  of  the  commercial 
seal  market  indicates  that  new  seal  designs  and 
materials  have  been  recently  introduced  which 
offer  the  potential  for  solving  the  fuel  leak 
problem. 

The  new  materials  include  a  new  Buna  N  compound 
and  Epichlorohydrin .  Hydrin  elastomers  are  re¬ 
ported  to  offer  high  resiliency  and  almost  con¬ 
stant  hardness  over  a  wide  temperature  range  with 
good  low  temperature  properties.  They  are  highly 
resistant  to  JP  fuels  and  exhibit  good  aging  and 
abrasion  resistance. 

The  new  desicms  combine  the  high  wear  resistance 
of  polytetrafluoroethylene  and  the  mechanical  in¬ 
tegrity  of  fluorosilicone  or  mechanical  springs 
for  structural  support.  Various  configurations 
using  these  combinations  of  material  are  currently 
available.  All  of  the  configurations  use  the 
polytetrafluoroethylene  for  the  dynamic  seal. 

These  new  materials  and  design  configurations  must 
be  test  evaluated  to  determine  if  they  can  operate 
in  the  specified  environment  and  provide  the  re¬ 
quired  service  life.  Also,  present  seal  material 
specifications  should  be  reviewed  to  determine  if 
more  stringent  control  of  the  ingredients  will  en¬ 
hance  desirable  seal  properties. 

It  is  recommended  that  a  survey  of  seal  manufac¬ 
turers  be  made  to  review  and  evaluate  the  new 
designs  and  material  combinations,  and  that  the 
most  promising  designs  be  selected  for  bench  test 
evaluation . 
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FAULT-ISOLATION  DEVICE 


A  principal  factor  in  the  formation  of  maintenance  policies 
is  cost  effectiveness;  that  is,  within  constraints,  mainte¬ 
nance  policies  are  based  on  achieving  goals  for  the  least  ex¬ 
penditure  of  resources.  This  effort  has  been  concerned  with 
an  analysis  and  evaluation  of  gas  turbine  fuel  control  fault- 
isolation  devices  and  their  potential  impact  on  the  life-cycle 
cost  of  the  fuel  control.  Specifically,  we  will  attempt  to 
answer  the  following  question  based  on  available  historical 
maintenance  data: 

"Can  a  device  used  for  fault  isolating  the  fuel  control 
be  cost  effective  when  included  as  part  of  the  U.S. 

Army  aviation  maintenance  system?" 

The  study  has  been  divided  into  the  following  three  basic  sec¬ 
tions  : 

]  .  Functional  Description  of  Fuel  Control  Models 

2.  Fault-Isolation  Device  Cost  Goals 

3.  Fault-Isolation  Techniques 

The  first  section  is  concerned  with  a  functional  description 
of  U„S.  Army  fuel  control  models  and  the  basic  requirements 
for  fault  isolation  on  each  model. 

The  second  section  analyzes  the  life-cycle  cost  factors  and 
computes  the  potential  cost  savings  on  those  factors  where  a 
fault-isolation  device  (FID)  has  an  impact  on  cost. 

The  third  section  describes  various  possible  FIDs  for  both  a 
current  hydromechanical  and  an  advanced  electronic  control. 
Based  on  cost  effectiveness,  a  detailed  design  -Ls  made  for 
the  most  promising  FID  for  a  hydromechanical  control. 
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Functional  Description  of  Fuel  Control  Models 


Descriptions  and  functional  schematics  of  the  T53,  T55,  T63, 

T73  and  T74  engine  controls  have  been  covered  in  the  sections 
dealing  with  failure  mode  analysis.  This  section  is  concerned 
with  the  basic  functional  mechanization  of  these  fuel  controls 
and  specifically  notes  the  similarities  and  differences  that 
may  be  significant  in  developing  fault-isolation  techniques. 

An  advanced-electronic-technology  fuel  control  design  has  been 
included  in  the  comparison  to  indicate  trends  for  future  Army 
gas  turbine  engines.  It  consists  of  a  hybrid  electronic  com¬ 
puting  section;  a  hydromechanical  fluid  metering,  fuel  pumping, 
and  alternator  section;  a  variable  inlet  guide  vane  actuator; 
~-d  the  necessary  transducers  and  sensors  for  signal  sensing. 
This  control  design  is  based  on  an  advanced  engine  control 
program  conducted  for  the  Eustis  Directorate,  USAAMRDL  (Ref. 

11)  - 


Fuel  Control  Functional  Block  Diagrams 

Figures  10  through  15  describe  the  functional  mechaniza¬ 
tion  of  the  fuel  control  models  listed  above  in  the  form 
of  block  diagrams.  Specifically  indicated  are: 

Input/output  parameters 

Methods  of  signal  transducing 

Types  of  mechanisms  used  for  computing 
metering  valve  position 

Pumping  and  fuel  pressure  regulation 

Dynamic  compensation 

2D  and  3D  cams 

Servo  systems 

Additional  geometry  control  modes 

These  diagrams  are  not  intended  to  be  complete  in  every  de¬ 
tail;  in  some  cases,  functions  which  are  not  directly 
relevant  to  fault  isolation  are  ignored  completely.  The 
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Figure  12.  T63  Engine  Control  Functional  Block  Diagram. 
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Figure  13.  T73  Engine  Control  Functional  Block  Diagram. 


Figure  14.  T74  Engine  Control  Functional  Block  Diagram. 


Figure  15.  AAMRDL  Control  Functional  Block  Diagram. 


basic  features  of  these  fuel  control  models  are  given  in 
Table  III  and  discussed  below 

Basic  Features 


1.  All  controls  meter  the  fuel  flow  on  the  .basis  of 
the  orifice  equation 

=  kc-An/ap 
f  d  R 

where 

K  =  constant 

=  discharge  coefficient 

Ar  =  metering  area 

AP  =  pressure  drop  across  metering  area 

All  of  the  controls  regulate  the  pressure  (AP) 
across  the  orifice,  and  fuel  flow  is  metered  by 
varying  the  metering  area.  This  is  achieved  on 
all  controls  by  means  of  a  metering  valve.  The 
valves  differ  only  in  their  shape  and  stroking 
mechanisms . 

2.  All  controls  contain  a  computing  section  whose 
output  controls  the  metering  valve  position 
according  to  preset  limiting  schedules  (accelera¬ 
tion  and  deceleration)  and  speed  governing  re¬ 
quirements  . 

3.  The  mechanisms  used  for  computation  vary  between 
control  models.  Of  the  turbine  engine  fuel  con¬ 
trols  presently  in  use  by  the  Army,  80%  are  hydro¬ 
mechanical  and  20%  are  pneumatic.  The  two  pneu¬ 
matic  control  models  used  are  produced  by  the  same 
manufacturer  and  use  similar  techniques  throughout. 
The  three  hydromechanical  fuel  control  models  vary 
somewhat  in  mechanization  of  similar  functions; 
for  example,  flapper  valves  versus  spool  valves. 
Because  of  the  complexity  of  the  computing  mechan¬ 
isms  within  the  fuel  controls,  it  is  apparent  that 
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simple  fault-isolation  signatures  will  not  be 
identified.  A  fault-isolation  device  must,  there¬ 
fore,  be  based  on  the  functional  performance  of 
the  fuel  control  computer.  This  may  be  done  by 
measuring  the  metering  valve  position  (or,  alter¬ 
natively,  measuring  the  actual  fuel  flow)  and  com¬ 
paring  it  to  the  correct  position  computed  by  a 
fault-isolation  device. 

4.  The  pressure  drop  across  the  main  metering  valve 
is  a  unique  failure  signature  for  the  fuel  meter¬ 
ing  sections  of  all  control  models.  All  failures 
in  the  fluid  controller  which  cause  the  engine  to 
malfunction  will  be  manifested  in  this  pressure 
measurement.  This  covers  faults  in  the  boost  and 
main  fuel  pumps,  the  main  pressure  regulating 
valve,  malfunctions  in  check  and  bypass  relief 
valves,  and  gross  internal  leakage  due  to  seal  de¬ 
terioration.  However,  maintenance  data  indicates 
that  these  sections  of  the  fuel  control  unit  may 
account  for,  at  the  most,  only  20  to  30%  of  the 
total  failures.  Therefore,  it  is  apparent  that  a 
fault-isolation  device  based  on  this  parameter 
could  be  effective  only  if  combined  with  a  device 
that  will  fault-isolate  the  fuel  control  computer. 

5.  Mass-fuel-flow  sensing  devices  are  not  included  in 
the  majority  of  present-day  U.S.  Army  aircraft. 
Also,  the  next  generation  of  Army  helicopters  re¬ 
presented  by  the  UTTAS  program  are  not  providing 
these  devices  as  part  of,  the  aircraft  system.  It 
follows  that  fault-isolation  concepts  based  on 
fuel-flow  measurement  must  include  the  fuel-flow 
measuring  device  as  part  of  the  system  cost.  A 
survey  of  mass-fuel-flow  sensors  indicated  that 
the  price  of  these  devices  would  probably  be  pro¬ 
hibitive  for  this  application.  This  would  tend  to 
favor  schemes  based  on  two  separate  performance 
measurements,  these  being: 

.  Metering  valve  position 

,  Fuel  pressure  drop  across  the 
metering  valve  (AP) 
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6.  Fuel-control  models  vary  in  their  requirements  for 
geometry  control  of  the  inlet  guide  vanes  and  com¬ 
pressor  bleed.  For  the  T63,  neither  function  is 
provided  in  the  fuel  control,  while  on  the  T53, 
both  are  provided.  For  control  systems  that  in¬ 
clude  either  of  these  functions,  a  fault-isolation 
device  must  account  for  them  independently.  Each 
geometry  control  is  an  independent  fuel  control 
output  that  must  be  given  an  independent  perform¬ 
ance  test  for  fault  isolation.  The  control  model 
used  as  the  reference  for  trade-off  studies  in¬ 
cludes  an  inlet  guide  vane  control. 

7.  With  one  exception,  all  fuel  control  models  use 
compressor  discharge  pressure  (P3)  as  an  input 
control  parameter.  The  exception  is  the  T53  en¬ 
gine  fuel  control,  which  senses  compressor  inlet 
pressure  (P2)  .  For  built-in  fault  isolation,  the 
requirements  would  be  basically  the  same  for  P2 
or  P3.  However,  for  ground  test  equipment,  meas¬ 
uring  P3  would  still  require  a  pressure  sensor  to 
be  built  in  to  the  fuel  control  unit  or  to  make  a 
connection  to  the  engine.  The  P2  measurement 
could  be  made  by  using  a  ground-based  atmospheric 
pressure  sensor.  This  would  allow  the  cost  of  the 
sensor  to  be  shared  among  several  aircraft. 

8.  All  of  the  hydromechanical  fuel  controls  use  3D 
cams  for  scheduling  fuel  flow,  inlet  guide  vane 
position,  and  compressor  bleed.  The  pneumatic 
controls  are  used  on  smaller  engines  with  less 
stringent  control  requirements.  This  is  reflected 
in  their  simpler  scheduling  systems  with  a  result¬ 
ing  lower  unit  cost.  It  can  be  assumed,  therefore, 
that  the  fault-isolation  device  required  will  be 
of  a  complexity  proportional  to  the  particular 
control  model. 
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Metering  Head  Pressure  Fault-Isolation  Systems 


The  constant  metering  head  pressure  system  is  common 
to  all  of  the  fuel  control  models  considered;  there¬ 
fore,  use  of  the  metering  valve  differential  pressure 
(Ap)  to  identify  malfunctions  in  the  controller  has 
been  treated  separately. 

In  general,  the  main  pressure  regulating  valve  main¬ 
tains  a  constant  pressure  differential  across  the  met¬ 
ering  valve  by  bypassing  excess  fuel  to  the  pump  inlet. 
Maintaining  a  constant  pressure  differential  makes 
metered  flow  proportional  to  the  area  of  the  main  met¬ 
ering  valve. 

Figure  16  shows  a  functional  block  d'  igram  of  a  AP 
fault  detection  mechanism.  A  differential  pressure 
sensor  measures  the  pressure  across  the  fuel-metering 
valve  and  compares  it  to  a  set  reference.  If  they  do 
not  agree  within  the  allowable  error  band,  a  NO-GO  is 
indicated  at  the  fault-isolation  device  readout.  It 
is  significant  that  the  required  pressure  monitoring 
ports  are  on  all  presently  used  fuel  controls,  as 
these  points  are  required  for  hanch  calibration  and 
setup  of  the  control. 


I - ■> 


Figure  16.  Metering  Valve  Pressure  FID  Block  Diagram. 
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For  future  controls,  the  AP  failure  sensor  could  be 
included  as  part  of  the  control  at  a  marginal  increase 
in  complexity  and  cost.  Such  a  system  mav  consist 
of  supplying  an  electrical  ground  signal  to  the  con¬ 
trol  FID  monitoring  connector  if  a  bellows  sensing  AP 
is  displaced  outside  the  acceptable  limits.  Figure  17 
indicates  such  a  scheme.  Also,  hydromechanical  de¬ 
signs  could  be  provided  which  would  cause  a  flag  to 
pop  up. 


METERING 

VALVE 

*P 


FID 

MONITORING 

CONNECTOR 


Figure.-  17.  Metering  Valve  Differential  Pressure  Sensor. 
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Fault-Isolation  Device  Cost  Goals 


This  section  is  devoted  to  an  investigation  and  analysis  of 
U.S.  Army  gas  turbine  fuel  control  life-cycle  cost  savings 
which  could  result  from  the  effective  use  of  a  fuel  control 
fault-isolation  device  (FID)  .  In  particular,  an  effective  FID 
will  eliminate  the  present  high  incidence  of  unjustified  re¬ 
moval  of  fuel  controls  from  Army  aircraft.  The  cumulative 
cost  savings  associated  with  the  elimination  of  these  unjusti¬ 
fied  removals  will  be  used  as  a  goal  for  cost  effectiveness  in 
evaluating  and  selecting  potential  fault-isolation  schemes. 

By  analyzing  ownership  costs  associated  with  the  fuel  control 
over  the  average  operational  life  of  the  aircraft,  an  indica¬ 
tion  of  areas  where  costs  may  be  significantly  reduced  by  an 
FID  should  be  apparent.  However,  detailed  information  was  not 
available  on  all  of  the  pertinent  life-cycle  cost  items  being 
considered,  and  in  these  cases  it  was  necessary  to  make  cost 
estimates . 

The  results  of  the  cost  analysis  are  summarized  in  Table  IV, 
which  lists  the  estimated  cost  savings  offered  by  a  100% 
effective  FID  for  each  of  the  life-cycle  items  considered  in 
the  analysis.  A  10-year  life  cycle  of  500  flight  hours  per 
year  for  a  total  life  cycle  of  5000  hours  was  assumed. 

The  cost  analysis  computed  potential  savings  considering  un¬ 
justified  removal  rates  of  25,  35  and  50%.  Costs  were  deter¬ 
mined  as  a  function  of  the  production  price  of  the  control. 
Figure  18  shows  the  results  of  this  analysis  and  indicates 
the  maximum  allowable  cost  of  the  FID  as  a  function  of  per¬ 
centage  of  unjustified  removals  for  fuel  control  production 
prices  between  $2000  and  $20,000.  The  normal  cost  goal  is 
indicated  at  the  35%  unjustified  removal  level,  which  (based 
on  Army  experience)  is  the  average  unjustified  removal  rate. 

The  actual  allowable  cost  of  the  FID  will  depend  on  the  effec¬ 
tiveness  of  the  FID.  A  100%  effective  FID  would  always  cor¬ 
rectly  indicate  when  a  control  removal  was  warranted.  Con¬ 
versely,  a  65%  effective  FID  would  result  in  35%  of  the  remov¬ 
als  being  unjustified.  This  situation  duplicates  the  present 
nominal  unjustified  removal  rate,  so  theoretically  a  65% 
effective  FID  could  not  be  cost  effective.  Assuming  a  linear 
relationship  between  the  cost  of  the  FID  and  its  effectiveness 
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MfiXIMH  ALLOWABLE  FID  COST  -  DOLLARS 
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as  indicated  in  Figure  19,  and  based  on  providing  a  realistic 
FID  effectiveness  between  90  and  95%,  the  corresponding  FID 
cost  goal  is  between  10  and  11.5%  of  the  fuel  control  produc¬ 
tion  price.  The  lower  cost  goal  of  10%  will  be  used  for  cost 
effectiveness  even  though  it  is  anticipated  that  an  FID  effec¬ 
tiveness  of  greater  than  90%  will  be  achieved. 

A  discussion  of  each  of  the  life— cycle  cost  factors  and  the 
cost  computations  summarized  above  are  outlined  in  the  follow¬ 
ing  sections. 

Maintenance  Model 

It  could  well  be  argued  that  what  is  cost  effective  for 
one  specific  aircraft  fleet  maintenance  environment  is  not 
necessarily  so  for  another.  For  example,  tactical  and 
utility  helicopters  in  the  wartime  environment  of  the  Re¬ 
public  of  Viet  Nam  have  created  a  maintenance  picture  com¬ 
pletely  different  from  that  of  fleets  based  in  the  U.S.  in 
a  peacetime  environment.  In  a  wartime  environment,  avail¬ 
ability  requirements  will  be  at  a  premium,  and  hasty 
troubleshooting  will  probably  cause  a  higher  percentage  of 
unjustified  fuel  control  removals  than  would  occur  under 
peacetime  conditions.  Also,  cannibalization  will  occur  in 
remote  front-line  conditions  in  order  to  bring  an  aircraft 
on-line.  To  analyze  all  of  the  possible  maintenance  en¬ 
vironments  would  not  be  practicable,  and  this  study  has 
considered  the  structure  only  as  it  is  typically  reflected 
in  the  maintenance  history  of  present  operational  fuel  con¬ 
trols.  Cost  effectiveness  is  based  on  these  conditions' 
continuing  to  exist  over  the  life-cycle  period  considered. 

The  fleet  representation  used  in  this  cost  study  is  based 
on  UH-1  and  AH-1  series  helicopters  which  use  the  Chandler 
Evans  TA-2  series  fuel  control  (66%  of  Army  gas  turbine 
fuel  controls) .  The  operating  theater  is  Southeast  Asia, 
and  a  wartime  environment  is  assumed.  This  is  significant 
in  estimating  the  fuel  control  repair/overhaul  turnaround 
time.  In  a  peacetime  environment  in  which  the  majority  of 
the  aircraft  fleets  may  be  based  in  CONUS,  turnaround  times 
would  obviously  be  reduced,  requiring  fewer  pipeline  spares, 
and  therefore  an  FID  would  impact  less.  in  general,  all 
U.S.  Army  helicopter  fuel  controls  follow  similar  mainte¬ 
nance  procedures  and  practices,  so  it  should  be  reasonable 
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MAXIMUM  ALLOWABLE  FID  COST  -  %  FUEL  CONTROL  COST 


BASED  ON  FUEL  CONTROL  HISTORY  IN  WHICH 
35%  OF  REMOVALS  WERE  UNJUSTIFIED 


FAULT  ISOLATION  DEVICE  EFFECTIVENESS  *  -  % 

'Effectiveness  is  defined  as  the  percentage  of  the 
time  the  FID  correctly  indicated  the  go/no-go 
status  of  the  fuel  control 


Figure  19.  Current  Hydromechanical  Fuel 
Control  FID  Cost  Objective. 
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to  assume  that  the  cost  estimates  derived  (normalized  with 
respect  to  the  unit  price)  will  be  applicable  to  any  of 
the  fuel  control  models  considered  in  this  study. 

The  logistics  and  maintenance  support  system  is  based  on 
a  simplified  picture  of  a  base  workshop  supporting  the 
various  field  organizational  levels  within  the  Southeast 
Asian  operating  area,  while  minor  and  major  overhauls  and 
redistribution  are  handled  at  a  CONUS-based  depot  and  the 
fuel  control  manufacturing  plant. 

Life-Cycle  Cost  Items 

The  following  sections  discuss  the  life-cyc1 e  cost  factors 
which  were  considered  in  determining  the  potential  savings 
offered  by  a  100%  effective  fuel  control  system  FID.  The 
methods  used  to  compute  the  savings  on  those  cost  factors 
which  are  affected  by  an  FID  are  also  included. 

1.  Development  and  Production 

These  nonrecurring  costs  are  reflected  in  the  unit 
cost  of  the  fuel  control.  They  are  usually  well 
defined  but  can  vary  from  year  to  year  according 
to  material  and  manpower  cost  escalations  and  pro¬ 
duction  rate  requirements.  The  unit  cost  of  a  fuel 
control  as  used  in  this  study  is  averaged  over  the 
10-year  life-cycle  period. 

Although  FID  cost  has  been  calculated  as  a  percent¬ 
age  of  the  fuel  control  unit  cost  based  on  current 
cost  estimates,  the  results  should  also  be  valid 
when  applied  to  imminent  and  future  projects, 
assuming  that  inflation  will  affect  all  areas  of 
maintenance  and  production  costs  equally. 

An  FID,  as  will  be  shown  in  the  following  sections, 
could  reduce  the  number  of  fuel  controls  required 
to  support  aircraft  fleets  by  up  to  10.2%.  The 
resulting  reduction  in  production  rate  requirements 
could  result  in  some  increase  in  the  unit  cost  of 
the  fuel  control.  However,  for  large  production 
controls,  this  increase  would  be  small  if,  in  fact, 
it  occurred  at  all,  and  therefore  development  and 
production  costs  would  not  be  affected  by  an  FID. 
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2 .  Test  Equipment 

This  area  of  cost  covers  all  equipment  required 
for  testing  fuel  controls.  This  includes  equip¬ 
ment  at  both  organizational  and  depot  levels  and 
includes  such  things  as  calibration  test  stands, 
special  tools,  test  fittings,  etc.  The  10.2%  re¬ 
duction  in  the  number  of  production  controls 
alluded  to  above  should  result  in  a  corresponding 
reduction  in  test  equipment  required  to  support 
the  fuel  control.  However,  in  consideration  of 
the  complexity  of  an  FID  and  its  test  equipment 
requirements,  it  is  estimated  that  there  would  be 
no  significant  change  in  the  overall  cost  of  test 
equipment. 

3.  Facilities 

Facilities  for  all  facets  of  maintenance  such  as 
test,  administration,  logistics,  stores,  etc.,  are 
nonrecurring  costs  which  would  not  be  significant¬ 
ly  impacted  by  the  use  of  an  FID.  This  assumes 
that  any  reduction  in  facility  space  arising  from 
the  reduced  fuel  control  removal  rate  would  prob¬ 
ably  be  offset  by  the  requirements  for  maintaining 
the  FID.  As  a  first  approximation,  and  in  consid¬ 
eration  of  the  FID  complexity,  this  assumption 
appears  reasonable. 

4 .  Manpower 

The  manpower  requirements  to  support  a  maintenance 
policy  will  vary  according  to  the  scheduled  and  un¬ 
scheduled  maintenance  tasks  required.  In  both 
cases,  this  depends  uoon  the  reliability  of  the 
equipment  and  the  efficiency  of  troubleshooting 
for  fault-identification.  As  a  result  of  fewer 
maintenance  actions,  the  manpower  requirements 
can  be  reduced.  In  this  case,  the  man-hours  saved 
will  be  the  difference  between  the  time  required 
to  set  up  and  test  the  fuel  control  with  the  FID 
and  the  time  to  remove  and  replace  the  fuel  con¬ 
trol  and  determine  if  the  malfunction  has  been 
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eliminated.  This  is  based  on  the  assumption  that 
the  FID  is  100%  effective  and  therefore  all  unjus¬ 
tified  removals  are  eliminated. 

Fuel  controls  unjustifiably  removed  from  aircraft 
will  not  only  consume  man-hours  at  the  organiza¬ 
tional  level  but  also  at  an  intermediate  level 
where  the  control  is  required  to  be  bench  tested. 
At  this  level,  Government  civilian  personnel  in 
wage  grade  8  (WG-8)  are  used  and  man-hour  costs 
are  higher  than  for  organizational  level  mainte¬ 
nance  personnel  (military  grade  E5) . 

Other  manpower  attributed  to  the  handling  and 
transportation  of  fuel  controls  is  covered  under 
those  headings. 

a .  Organizational  Level 

Grade  E5  maintenance  personnel  are  used  at 
this  level.  The  cost,  based  on  Army  data,  is 
$9.50  per  maintenance  man-hour,  which  covers 
amortizing  the  cost  of  training,  salary,  hos¬ 
pital  and  welfare  benefits,  overhead,  etc., 
over  a  productive  year  of  1000  man-hours. 

From  the  analysis  of  available  maintenance 
data  (Reference  19)  ,  the  following  figures 
have  been  chosen  as  being  representative  of 
U.S.  Army  gas  turbine  fuel  controls. 

Mean  time  between  removals  =  400  hours 

Average  maintenance  time 

per  removal  =  3  man-hours 

It  is  estimated  that  a  fault-isolation  device 
will  reduce  the  average  maintenance  time  spent 
on  unjust  removals  to  0.75  hour.  This  gives 
a  net  savings  of  2.25  man-hours  for  every  un¬ 
just  removal  eliminated. 
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Cost  Savings  (Cs)  (per  fuel  control  unit  per 
1000  flight  hours) 


1.  50%  of  removals  unjustified 


Cs  = 


1000  hours 


400  hours/removal 


x  0.5  unjust 


removals/removal  x  2.25  man-hours  / 
unjust  removal  x  $9 . 50/man-hours  = 
$26.70 

2.  35%  of  removals  unjustified 


Cs  =  $26.70  x  “ £  =  $18. 70 

50/4 


3.  25%  of  removals  unjustified 


Cs  =  $26.70  x  ^  =  $13.25 


b.  Intermediate  and  Depot  Level 


Government  civilian  personnel  in  wage  grade  8 
are  used  at  this  skill  level.  The  cost  is 
$12.87  per  maintenance  man-hour  on  the  same 
basis  as  given  in  the  organizational  level 
manpower  costs. 


The  man-hours  attributed  to  a  fuel  control 
bench  test  vary  considerably  and,  contrary  to 
what  might  be  expected,  show  no  direct  rela¬ 
tionship  to  the  unit  cost  of  the  fuel  control. 
Of  the  fuel  controls  analyzed,  the  figures 
varied  from  4  to  10  hours,  and  this  study  has 
assumed  a  mean  time  of  7  man-hours  required 
for  a  fuel  control  to  be  checked  out  on  a  fuel 
test  stand. 
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Cost  Savings  (Cs)  (per  fuel  control  per  1000 
flight  hours) 


1.  50%  of  removals  unjustified 

1000  hours  „  „ 

Cs  =  1  : - - - —  x  0.5  uniust 

400  hours/removal 

removals/removal  x  7  man-hours/ 

removal  x  $12 . 87/man-hours  =  $113.00 

2.  35%  of  removals  unjustified 

Cs  =  $113.00  x  777  =  $79.00 

D  (J  /o 

3.  25%  of  removals  unjustified 


2  5°/ 

Cs  =  $113.00  x  7777  =  $56.50 

bu  /o 


5.  Fuel  Control  Uhit 

The  development  and  production  costs  of  fuel  con¬ 
trols  required  for  the  aircraft  fleets  were  pre¬ 
viously  discussed,  and  an  FID  does  not  impact  this 
cost.  However,  the  total  number  of  fuel  controls 
required  to  support  maintenance  will  be  reduced  by 
the  effective  use  of  an  FID.  These  fuel  controls 
are  required  in  the  following  categories: 

a.  Fuel  controls  used  as  spares  to  support  field 
maintenance  {held  in  stores)  . 

b.  Fuel  controls  used  to  support  the  maintenance 
repair/overhaul  pipeline  to  ensure  that  de¬ 
lays  in  the  pipeline  are  compensated  for 
(turnaround  time) . 

c.  Fuel  controls  for  spare  engines. 

d.  Fuel  controls  used  to  replace  nonrepairable 
or  lost  controls  (aircraft  damaged  or  de¬ 
stroyed  in  battle) . 
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Items  (c)  and  (d)  will  not  be  influenced  by  the 
use  of  an  FID,  but  requirements  for  spares  needed 
for  field  maintenance  and  pipeline  backup  can  be 
expected  to  diminish  significantly.  In  the  case 
of  the  pipeline  backup  spares,  the  reduct  ion  will 
simply  be  the  total  number  previously  required  to 
maintain  the  turnaround  time  of  the  unjustified  re¬ 
movals.  The  requirement  for  spares  held  in  stores 
can  be  expected  to  drop  by  the  same  percentage  as 
the  reduction  in  fuel  control  removals. 

a  .  Stock  Level 

The  spares  held  in  stock  are  approximately  20'/ 
of  the  number  of  aircraft  in  the  fleet.  it  is 
assumed  that  these  maintenance  support  spares 
could  be  reduced  in  proportion  to  the  reduc¬ 
tion  in  removal  rate.  Counting  all  fuel  con¬ 
trols,  the  ratio  of  fuel  controls  in  the  Army 
inventory  relative  to  the  number  of  aircraft 
has  been  estimated  at  approximately  1.75. 

Therefore : 

Stock  Spare  Units  _  20  _ 

Total  No.  Units  175  '  ° 

For 

1.  Unjustified  removals  =  50%  of  total 
11.5%  50%  C  . 

cs  *  mm"  x  Too*  x  l  x  1000  hours 

=  557.50  7 

Xj 


where 

C  -  unit  cost  of  fuel  control 
L  =  life  cycle  in  flight  hours 
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2. 


Unjustified  removals  =  35%  of  total 


cs  =  ?57-50  E*it  =  ?40-25  L 

3.  Unjustified  removals  =  25%  of  total 
Cs  =  557.50  528.75  f 

b.  Maintenance  Pipeline  Spares  Requirement 

Figure  20  gives  a  simplified  picture  of  a 
typical  fleet  maintenance  structure  from  fie.ld 
organization  through  to  depot  repair/overhaul. 
The  transit  times  are  representative  estimates 
of  times  being  experienced  with  present  combat 
operations  in  the  Republic  of  Viet  Nam.  This 
includes  typical  delays  due  to  priority  ship¬ 
ping,  handling,  rerouting,  etc.  Additional 
spares  must  be  held  which  will  allow  for  the 
transit  time  delays  in  the  maintenance  pipe¬ 
line  and  ensure  a  continued  supply  of  available 
spares  at  the  fleet  level.  Summarizing  these 
requirements,  we  have: 

27%  of  the  removed  controls  require  0.78 
year  turnaround. 

Therefore : 

Required  spares  =  27%/year  x  0.78  year 

-  21% 

27%  of  the  removed  controls  require  0.545 
year  turnaround. 

Therefore: 

Required  spares  =  27%/year  x  0.545  year 

=  14.5% 
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Figure  20.  Typical  U„S.  Army  Maintenance  pipeline. 


11%  of  the  removed  controls  require  0.145 
year  turnaround . 

Therefore : 

Required  spares  =  1.1%/year  x  0.145  year 


=  1.6% 


Unjustified  controls  removed  require  0.104 
year  turnaround. 

Therefore,  required  number  of  spares  for: 

1.  50%  unjustified  removals  -  3.6% 

2.  35%  unjustified  removals  =  2.5% 

3.  25%  unjustified  removals  =  1.8% 

The  cost  savings  that  may  be  realized  is  ac¬ 
quired  by  amortizing  the  cost  of  the  spares 
that  support  this  maintenance  pipeline  over 
the  life  cycle  of  the  control. 

The  approximate  index  of  fuel  controls/ 
aircraft  =  1.75. 

Therefore,  cost  Cs  is: 

1.  Unjustified  removals  =  50%  of  total 

Cs  =  77—7  x  7  x  1000  hours  =  $20.60  7 

1 7  5  /o  L»  Li 

2.  Unjustified  removal  =  35%  of  total 

Cs  ~  7777  x  7  x  1000  hours  =  $14.40  7 

L  /  D  /o  Li  Li 

3.  Unjustified  removals  =  25%  of  total 

Cs  =  -r|4  x  t  x  1000  hours  =  $10.30  7 

i75%  l,  L 
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6.  Logistic  Support 

This  includes  all  utilities,  etc. ,  which  are  re¬ 
curring  costs  established  at  the  induction  of  the 
maintenance  program.  No  change  in  these  costs 
should  be  apparent  as  the  result  of  a  fault- 
isolation  device  used  for  fuel  control  maintenance. 

7.  Spare  Parts 

Fuel  control  parts  used  for  repair  and  overhaul 
at  intermediate  and  depot  levels  are  recurring 
costs  that  depend  on  the  reliability  and  the  cost 
of  the  individual  fuel  control  parts.  However, 
by  definition,  this  study  addresses  the  unjusti¬ 
fied  removals  which  will  not  have  parts  replaced 
and,  hence,  will  not  be  impacted  by  an  FID. 

8.  Overhauls 

Normally,  overhauls  are  recurring  maintenance 
costs  that  depend  on  either  the  degree  of  repair 
required  (unscheduled)  or  the  number  of  flight 
hours  accumulated  since  the  last  overhaul  (sched¬ 
uled)  . 

The  maintenance  decisions  concerning  fuel  control 
overhauls  vary  froi.  one  fuel  control  model  to 
another  and  depend  upon  their  historic  reliabil¬ 
ity  performances.  This  study  has  considered  the 
Chandler  Evans  TA-2S  model  as  typical  of  the 
matured  culmination  of  a  fuel  control  series  evo¬ 
lution.  This  should  be  more  representative  of  the 
higher  reliability  expected  from  the  next  genera¬ 
tion  of  fuel  controls  with  scheduled  overhauls  of 
5000  hours  or  more. 

Although  the  total  inventory  of  fuel  controls  can 
be  reduced  by  the  use  of  an  FID,  this  lesser  total 
would  be  required  to  accumulate  the  same  total 
flight  hours,  requiring  each  control  to  be  over¬ 
hauled  more  often  (calendar)  .  However,  the  result 
will  be  the  same  total  number  of  overhauls  for  the 
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life  cycle  of  the  aircraft  fleet  with  no  change  in 
the  total  cost  of  fuel  control  overhauls.  One 
side  effect  of  an  FID  is  the  overhauls  that  would 
have  occurred  because  controls  were  unjustifiably 
removed  and  had  operated  for  more  than  1800  flight 
hours  (TA-2S  scheduled  overhaul) .  Analysis  of 
maintenance  data  shows  that  on  the  average,  these 
controls  would  have  accumulated  300  more  flight 
hours  before  being  legitimately  removed  and  sent 
for  overhaul.  Over  the  life  cycle  of  the  control, 
these  overhauls  can  be  used  as  a  cost  savings 
attributed  to  eliminating  the  unjustified  removals. 

The  available  maintenance  history  shows  that  on 
the  average,  30%  of  removed  fuel  controls  are  over¬ 
hauled.  Of  these  30%,  4.  2%  reached  their  scheduled 
overhaul  high  time  and  were  therefore  overhauled 
without  a  prior  fault  diagnosis.  This  includes 
controls  that  were  unjustifiably  removed.  By  ana¬ 
lyzing  the  maintenance  history  of  fuel  controls 
with  more  than  the  scheduled  overhaul  time,  it  was 
estimated  that  they  would  operate,  on  the  average, 
an  additional  300  flight  hours  before  being  justi¬ 
fiably  removed  and  overhauled.  Over  the  life  cycle 
of  the  control,  there  is  some  penalty  in  additional 
overhauls  that  can  be  used  as  a  cost  savings  with 
an  FID. 

For  the  TA-2S  fuel  control,  high  time  for  overhauls 
=  1800  hours. 

The  mean  time  since  last  overhaul  =  2000  hours. 

With  an  FID,  the  expected  mean  time  since  last 
overhaul  =  2300  hours. 

C 

Also,  the  approximate  cost  of  an  overhaul  =  — . 
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1. 


Unjustified  removals  =  50%  of  total 


Cs  =  4.2%  x  50%  x  — 

J  Li 


2000  2300 


x  1000 


hours  =  $2.30  — 
L 


2.  Unjustified  removals  =  35%  of  total 


Cs  =  $1.65  7 
L 


3.  Unjustified  removals  =  25%  of  total 


Cs  =  $1.15  7 
L 


9.  Reorder  Costs 


At  the  organizational  spares  level,  reorder  takes 
place  whenever  the  stock  level  is  reduced  to  some 
specified  level.  Similarly,  reorder  may  be  made 
at  depot  level  to  replace  lost  or  unrepairable 
units,  although  this  would  be  on  a  much  smaller 
scale.  If  it  is  assumed  that  spares  held  in  stock 
could  be  reduced  by  the  same  percentage  as  the  un¬ 
justified  removals,  then  the  reorder  requirements 
will  be  reduced  but  the  reorder  frequency  remains 
the  same.  For  example.  Figure  21  shows  data  that 
might  represent  typical  stockkeeping.  Here  we 
have  a  situation  in  which  initially  40  units/month 
are  required  for  maintaining  the  fleet;  the  stock 
level  is  a  maximum  of  100  units;  reorder  takes 
place  when  the  stock  level  is  reduced  to  60  units; 
and  as  a  result  of  the  order,  80  units  are  received 
1  month  later  (this  leaves  a  safety  reserve  of  20 
units) .  The  dashed  lines  show  the  situation  re¬ 
sulting  from  the  use  of  an  FID  when  only  20  units/ 
month  are  required  for  maintenance.  The  maximum 
stock  level  has  now  been  reduced  to  50  units,  and 
reorder  is  initiated  at  a  30-unit  level,  allowing 
a  minimum  of  10  units  before  replenishment.  As  is 
apparent,  the  reorder  frequency  remains  the  same. 
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STOCK  LEVEL  (UNITS) 


so  no  reorder  processing  life-cycle  cost  savings 
will  result  from  using  a  fault-isolation  device. 


STOCK  LEVEL  REQUIREMENTS  (TYPICAL) 

WITHOUT  FID  _ 

WITH  FID  _ 


Figure  21.  Stock  Level  Reorder  Frequency. 

10.  Supply  Administration 

The  overhead  associated  with  supply  administra¬ 
tion  should  be  amortized  over  the  life  cycle  of 
the  equipment.  A  fault -isolation  device  could 
have  an  indirect  impact  on  these  administrative 
costs,  but  attempting  to  speculate  these  impacts 
in  terms  of  dollars  would  be  beyond  the  scope  of 
this  program.  As  a  result,  it  is  assumed  that 
these  costs  will  remain  unchanged. 
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11.  Transportation,  Handling  and  Storage 

Whereas  storage  costs  could  not  be  considered  a 
significant  factor  in  the  U.S.  Army  fuel  control 
cost  analysis,  transportation  and  handling  are 
recurring  costs  which  are  directly  dependent  on 
the  maintenance  history  of  the  control.  A  direct 
reduction  in  fuel  controls  removed  from  aircraft 
installations  will  result  in  the  same  reduction 
in  transportation  and  handling  actions.  For  mili¬ 
tary  transportation,  the  operating  costs  are  not 
well  defined  (cannot  be  logically  allocated  to 
the  fuel  control  unit  alone) ,  and  the  figures  used 
in  this  study  are  based  on  the  equivalent  commer¬ 
cial  transportation  costs  (average  weight/mile 
rates) .  The  definition  of  man-hours  allocated  to 
handling  is  also  rather  nebulous  as  to  where  time 
is  booked  to  the  maintenance  action  and  where  it 
becomes  transportation  handling.  However,  it  is 
evident  that  any  additional  handling  time  that 
may  occur  is  small  when  compared  to  the  3  hours 
for  remove/replace  at  the  field  organizational 
level  and  7  hours  testing  at  the  depot  support 
level.  This  study  has  not  included  any  cost  for 
handling.  Justification  is  in  the  likely  magni¬ 
tude  of  this  figure  (an  order  removed  from  the 
more  significant  manpower  costs)  if  it  had  not 
already  been  included  in  other  man-hour  estimates. 
Transportation  costs  have  been  based  on  commercial 
rates,  and  a  one-way  packaging  and  shipping  rate 
of  $0.23  per  pound  per  trip  has  been  estimated. 

For  the  TA-2  fuel  control  with  a  weight  of  30 
pounds  (includes  power  turbine  governor  and  inte¬ 
grated  pump),  average  package  weight  =  35  pounds. 

23 

Cost  per  round  trip  =  2  x  35  x  =  $16.00 
Mean  time  between  removals  =  400  hours 
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Therefore,  in  1000  flight  hours,  transportation 
costs  = 

1000  ,  __  __  __ 

^55-  x  $16.00  =  $40.00 

For : 

1.  Unjustified  removal  =  50%  of  total 
Cs  =  $20.00 

2.  unjustified  removals  =  35%  of  total 
Cs  =  $14.00 

3.  unjustified  removals  =  25%  of  total 
Cs  =  $10.0' 

12.  Salvage  Credit 

These  are  nonrecurring  credits  at  the  expiration 
of  the  program  and  are  made  up  of  all  equipment, 
parts,  facilities,  etc.,  that  can  be  reused  or 
resold.  All  available  evidence  indicates  that 
gas  turbine  fuel  controls  do  not  have  any  real 
salvage  worth,  and  as  a  result,  a  fault-isolation 
device  will  not  impact  on  this  life-cycle  cost 
aspect. 

No  allowance  has  been  given  to  the  phasing  out 
period  of  the  life  cycle,  where  maintenance,  par¬ 
ticularly  with  respect  to  overhauls,  can  be  re¬ 
duced  by  reusing  controls  from  scrapped  aircraft. 

13.  Aircraft  Operations 

a.  Aircraft  Availability 

The  reduced  maintenance  time  resulting  from 
the  use  of  a  fault-isolation  device  should 
mean  that  aircraft  availability  is  improved. 
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If  this  is  utilized  in  terms  of  combat  and 
training  missions,  then  it  could  be  postu¬ 
lated  that  the  total  fleet  requirements  could 
be  reduced  for  the  same  mission  schedule,  and 
the  life-cycle  cost  savings  attributed  to 
this  could  be  used  as  a  credit  toward  the  FID. 
However,  because  of  parallel  maintenance  pol¬ 
icies  and  varying  fleet  requirements,  it  is 
virtually  impossible  to  give  real  monetary 
significance  to  availability.  Therefore, 
this  study  has  not  considered  improved  avail¬ 
ability  as  a  cost  factor  in  computing  the 
total  potential  cost  savings  associated  with 
a  fault-isolation  device. 

b.  Aircraft  Accidents  and  Aborted  Missions 

Aircraft  accidents  and  aborted  missions 
attributed  to  the  fuel  control  unit  may  be 
reduced  with  an  effective  fault-isolation 
device.  However,  this  is  indirectly  related 
to  the  objectives  of  the  device,  which  are  to 
detect  the  presence,  or  absence,  of  a  fuel 
control  fault  at  ground  support  level.  This 
would  not  be  true  of  a  diagnostic  device  in 
which  impending  failures  would  be  detected 
and  appropriate  action  taken. 
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Fault-Isolation  Techniques 


The  objective  common  to  all  of  the  fault- isolation  techniques 
evaluated  in  this  report  is  to  establish  a  fuel  control  sys¬ 
tem  fault-isolation  device  (FID)  which  will  substantially  re¬ 
duce  unjustified  removals,  and  which  is  also  compatible  with 
the  cost-effectiveness  criteria  established  in  the  preceding 
section.  Fault  isolation  is  assumed  to  be  required  to  identify 
faulty  line  replaceable  assemblies  (LRU's)  rather  than  for 
isolating  to  failures  of  internal  components  such  as  gears, 
valves,  bellows,  flyweights,  etc.,  which  are  replaced  at  the 
depot  level.  Also,  the  FID  is  assumed  to  be  required  only  for 
internal  failures  which  cause  engine  performance  errors  and 
not  for  visually  discernible  failures  like  fuel  leaks. 

The  effectiveness  of  an  FID  is  measured  by  its  ability  to  cor¬ 
rectly  identify  fuel  controls  with  internal  failures  which  de¬ 
grade  engine  performance.  One  hundred  percent  effectiveness 
implies  fault  identification  of  the  control  for  all  such  types 
of  internal  failures.  It  also  implies  that  a  correctly  func¬ 
tioning  control  will  never  be  identified  as  the  failed  compo¬ 
nent.  To  achieve  this  goal,  the  FID  must  respond  to  all 
possible  failure  modes  that  can  affect  performance,  regardless 
of  their  probability  of  occurrence,  and  be  free  of  failure 
modes  of  its  own.  This  is  not  a  practical  goal,  since  any 
realistic  mechanization  of  the  fault-isolation  functions  is 
bound  to  be  less  than  100%  reliable. 

It  is  reasonable  to  expect  that  as  the  number  of  failure  modes 
to  which  the  FID  is  designed  to  be  responsive  increases,  the 
more  complex  will  be  iLs  mechanization  requirements;  therefore, 
its  cost,  size,  and  weight  will  increase  and  its  reliability 
will  decrease.  A  realistic  effectiveness  goal  for  the  FID 
must  be  based  upon  the  objective  of  cost  effectiveness,  defined 
at  the  beginning  of  this  section,  since  an  incorrect  identifi¬ 
cation  increases  maintenance  cost.  However,  100%  effective 
fault-isolation  techniques  are  likely  to  require  complex  mech¬ 
anization  and  can  therefore  be  too  expensive  to  be  cost  effec¬ 
tive.  On  the  other  hand,  fault- isolation  concepts  which  are 
less  than  100%  effective,  but  do  respond  to  a  majority  of  the 
higher  frequency  failure  modes  in  the  control,  might  very  well 
be  acceptable  on  the  basis  of  their  cost  effectiveness. 
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This  section  includes  estimates  of  the  cost  and  effectiveness 
for  several  technically  feasible  fault-isolation  concepts  to 
determine  which  is  potentially  the  most  cost  effective  approach. 
Since  the  type  of  control  to  which  the  FID  is  applied  has  a 
major  impact  on  its  feasibility  and  cost  effectiveness,  both 
current  hydromechanical  type  and  advanced  electronic  type  fuel 
control  FID  applications  are  evaluated.  The  evaluation  also 
includes  FID  concepts  which  provide  ground  test  equipment  (GTE) 
to  be  shared  by  a  number  of  aircraft,  as  well  as  completely 
built-in  test  (BIT)  FID  techniques.  The  advantage  of  the  for¬ 
mer  over  the  latter  is  that  it  enables  the  cost  of  the  GTE  to 
be  shared  by  a  number  of  fuel  control  units. 

Trade-off  Summary  of  FID  Schemes 

The  various  FID  schemes  described  in  detail  in  the  follow¬ 
ing  sections  are  summarized  in  Tables  V  and  VI.  Table  V 
summarizes  FID  concepts  applied  to  a  typical  current  hydro¬ 
mechanical  fuel  control,  while  Table  VI  summarizes  the  same 
concepts  applied  to  a  future  electronic- type  control. 

Both  tables  include  BIT  and  GTE  fault-isolation  schemes. 

These  tables  facilitate  a  trade-off  analysis  by  allowing 
quick  comparisons  of  various  FID  schemes  with  respect  to 
their  weight,  size,  cost,  advantages,  and  disadvantages. 
Since  we  are  primarily  interested  in  the  impact  of  the  FID 
on  the  control  unit,  the  weight,  size  and  cost  are  esti¬ 
mated  in  percentage  of  the  control  unit  weight,  size  and 
cost.  The  hydromechanical  and  electronic  type  fuel  con¬ 
trols,  selected  for  FID  applications,  are  approximately 
equal  in  functional  complexity  and  cost  ($7,000).  However, 
the  electronic  type  control  is  half  the  size  and  weight  of 
the  30-pound,  400-cubic-inch  hydromechanical  unit.  There¬ 
fore,  the  impact  of  an  FID  scheme  on  control  unit  size  and 
weight  is  significantly  greater  in  an  electronic  type  con¬ 
trol  than  in  a  hydromechanical  application. 

For  both  types  of  controls,  the  redundant  fuel  control 
scheme  provides  close  to  100%  fault  isolation  and  also  im¬ 
proves  aircraft  mission  reliability  by  enabling  the  pilot 
to  substitute  the  standby  control  unit  for  a  faulty  on-line 
unit.  However,  this  scheme  more  than  doubles  the  weight, 
size  and  cost  of  the  control  system. 
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e  Sis*  *  weight  not 
,  important 
I  #  Only  1  device 

per  5  aircraft  re¬ 
quired 

•  Can  use  ground 
electrical  power 
1  •  99  to  99.8%  of fee- 
|  tiv* 

!  *  Nor*  comprehensive 
I  tests  possible 


t  Hot  always  available 
»  Aequiraa  built-in 
sensors  on  present 
fuel  controls 
>  Acquires  longer  set¬ 
up  time 

i  For  ground  testing. 


This  would 
the  only  system  that 
might  be  cost-effective 
with  present-day  foal 
controls. 


the  ■ 


>  allowable 
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TABLE  VI .  ELCCTW.ttlC  TYPE  fUEL  CONTROL  fAVLTwI  SOLUTION  SCHEMES  TMDE-OEE  STUDY  SlPgtAPY 


Type 

t-ecr.pt. on 

■  Me.qht 

H»  of  Tuel 

I  Control) 

Sire 

lx  of  fuel 

J  Control) 

Cost 

1  •  ruel 

Control i 

Basic  Advantages 

1.  L*J-»  i 

fuel 

control 

Ikipiicate  fuel  control 
unite  with  ew.tchover 
facility  for  trouble¬ 
shooting  and  backup 

1  120 

L_ 

I  104 

| 

103 

e  Approaches  lOOX  ef¬ 
fect  iveness 
s  improves  aircraft 

availabi 1 ity.  main- 
tainability.  and 

s  Coat  prohibitive 
e  Duplicate  syste-s  in¬ 
crease  vuinerabil ity 
e  Proble-  of  installa¬ 
tion  with  present 
aircraft  systems 

th.s  .is  *  candidate 
system 

I  2.  Model 

reference 

•y»te» 

al  Electronic  computer 

tensors  and  power 
supply  co— putes  de¬ 
sired  fuel  flow  and 

1CV  position.  These 
are  coepered  to  act¬ 
ual  output  sensed  by 
-eter.nq  valve  and  1CV 
pos i t ion  sensors. 

49.0 

94.4 

90.4 

s  44  to  99. •%  effec¬ 
tive 

e  Can  be  carried  in 
cockpit 

s  Staple  CO/NO-GO 

test 

supply  and  electro- 

e  Requires  costly  high- 
performance  computer 

dot  cost  effective  at 
pieaent  time 

bl  Electronic  computer, 
using  control  unit  sen- 
sore  and  power  supply, 
ca-putes  desired  fuel 
flow  and  10V  position. 
These  are  coapared  to 
actual  outputs  sensed 
by  control  unit  metar- 
inq  valve  and  IOV 
position  sensors. 

1 

— 

,4.1 

17.0 

40.0 

e  49  to  49.4%  effec¬ 
tive  depending  upon 
control  unit  sen¬ 
sors  and  power  sup¬ 
ply  reliability. 

e  Simile  to  interface 
with  advanced  elec¬ 
tronic  type  fuel 
controls 

e  Can  be  carried  in 
cockpit 

e  bower  in  coat  than 
option  fa) 

e  Si— pie  GO/ND-OO  teat 

s  Requires  costly  high- 
per  forms  nee  computer 
e  bees  effective  than 
option  (a) 

Not  coat  effective  at 
present  ti-e 

).  Threshold 
reference 
•yitee 

1 _ 

Special-purpose  electron¬ 
ic  loqic  unit  coa^ere* 
threshold  li*its  sqainst 
control  unit  -eterinq 
valve  and  10V  position 
for  specific  operatinq 
'■•des  only. 

n.* 

20.4 

11.4 

e  Ujwer  cost  than  la 2 
e  Sinple  to  interface 
to  advanced  elec¬ 
tronic  fuel  control 
e  Can  be  carried  in 
cockpit 

e  Simile  ao/mn-ao  teat 

e  Probably  only  R0 -90% 
effective 

e  increases  probability 
of  unjustified  engine 
re-oval 

flot  coat  effective  at 
present  tie# 

j  «.  Pei  lure 

signature 

sensing 

Nydrophonic.  vibration 

and  pressure  sensinq 

9.4 

R.8 

19.9 

e  Potential  of  fore¬ 
casting  so— e  i—i- 

e  kill  probably  detect 
only  10-10%  of  all 

Majority  of  fuel  control 
failures  do  not  -anifest 

' 

— 

tenoration  of  internal 
fuel  control  parts 

e  Coepstible  with  en¬ 
gine  health  analysis 
techniques 

s  Could  throve  -is- 
sion  reliability 

Vibration/ sonic  ana¬ 
lyser  eapenaive  for 
fuel  control  alone 

characteristic  signa¬ 
tures  aui table  for  this 
type  of  analyaie 

9.  Fuel 
control 

eel*  teet 

<9>#n-loop  check  of  elec¬ 
tronic  type  fuel  control 
co-puter  at  specific 
self -test  calibration 
points. 

< Start,  accel.  decal . 

■,  qov. .  qov.l 

7.4 

11.4 

4.2 

e  Does  not  require 
engine  operation 
e  Sisple  GQ/UO-OO 

teat 

e  Coat  effective  on 
electronic  fuel 
controls 

e  hiilt-in  features 
(R1T) 

e  Probably  only  90  to 

49*  effective 
e  Electronics  is  re¬ 
quired  to  -set  en¬ 
gine-mounted  environ- 

e  Requires  ground  power 
supply 

Good  potential  for 
future  electronic  con¬ 
trols 

j 

4 .  Recorded 
fuel  floe 

enelyeie 

1 

— 

Plot  of  M(  vs.  kj  dur- 
inq  enqine  atart.  accel 
to  -as  and  decal  to 
idle  is  coopered  to  de¬ 
sign  curves  for  speci¬ 
fied  at«ospheric  condi¬ 
tions  . 

4.1 

7.0 

4.9 

e  (kies  not  require 
fuel  control  -odi- 
fi cat  lone  in  pres¬ 
ent  aysteee 
e  Flexible  to  changes 
in  apecif icettona 
e  Relatively  low  coat 

*«  iit>irwif»»» 

curves  and  technical 

analyses 

e  Doubtful  if  Mainte¬ 
nance  personnel  would 
use  this  system 
e  Transient  response  of 

suf  i  icier. t 

Required  setup  time 
and  analysia  detract 
fro-  advantages. 

•nteqratsd 

teet 

equipment  | 
O.I.T.t, 

_ 1 

•i— liar  to  Type  2  but 
used  only  as  ground 
support  equip— ent 
that  is.  does  not  fly 
with  aircraft  . 

*•* 

9.4 

10.2 

e  Sue  a  weight  not 

isportant 

e  Only  1  device  per 

9  aircraft  required 
e  can  use  ground  elec¬ 
trical  power 
e  44  to  99. ■%  affec¬ 
tive 

a  (tore  co-prahenaive 
testa  poaaible 

e  Mot  always  available 
e  Still  requires  sensors 
installed  on  present 
in-service  engines 
e  Requires  longer  setup 
tine 

e  Maintenance  personnel 
-ay  still  change  a 
control  rather  than 
teat  with  this  unit  | 

This  would  appear  to  be 
the  only  system  that 
might  be  cost-effective 
with  present-day  fuel 
controls. 
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The  model  reference  scheme  is  substantially  lower  in  weight, 
size  and  cost  than  the  redundant  fuel  control  unit  while 
still  providing  highly  effective  fault  isolation.  These 
economies  are  obtained  by  sacrificing  fuel  control  redun¬ 
dancy,  which  is  not  a  requirement  for  fault  isolation. 

The  model  reference  FID  provides  an  electronic  simulation 
of  correct  fuel  control  functioning  which  can  be  used  to 
detect  fuel  control  failure,  but  cannot  functionally  sub¬ 
stitute  for  a  failed  control  unit.  Though  much  lower  in 
cost  than  redundant  fuel  controls,  the  model  reference  FID 
costs  far  in  excess  of  10%  of  the  control  unit  price  limit 
for  a  cost-effective  FID  scheme.  Its  excessive  cost  is 
due  primarily  to  its  requirement  for  a  high-performance 
electronic  computer  for  simulating  correct  fuel  control 
functioning. 

The  cost  of  the  threshold  logic  computer  is  only  one-third 
the  cost  of  the  high-performance  model  reference  computer; 
however,  it  is  unlikely  that  this  threshold  logic  computer 
could  be  more  than  90%  fault-isolation  effective.  The 
threshold  reference  FID  costs  significantly  more  than  the 
maximum  allowable  cost  (10%),  while  its  maximum  potential 
effectiveness  does  not  approach  the  minimum  effectiveness 
(90%)  required  for  a  cost-effective  FID.  The  threshold 
reference  scheme  is  therefore  not  cost  effective  at  the 
present  time. 

A  further  reduction  in  FID  cost  is  possible  in  electronic 
type  fuel  control  application  by  using  self-test  schemes 
for  providing  the  fault-isolation  function.  This  is  feas¬ 
ible  in  electronic  type  controls  which  incorporate  an  elec¬ 
tronic  computer  for  generating  control  output  signals  from 
the  measured  input  parameters.  In  the  self- test  scheme, 
the  computer  inputs  are  switched  to  calibrated  reference 
settings  and  the  computer  outputs  are  compared  to  the  ex¬ 
pected  output  settings.  Failure  in  the  computer  is  indi¬ 
cated  when  any  computer  output  exceeds  its  known  output 
pressure  drop  (AP)  across  the  main  metering  valve.  The  in¬ 
corporation  of  a  built-in  self-test  function  in  the  elec¬ 
tronic  computer  increases  its  cost  slightly  over  6%  and 
produces  only  moderate  increases  in  control  unit  weight 
and  size.  If  optimally  designed,  a  fuel  control  self- test 
FID  should  be  able  to  provide  up  to  95%  effective  fault 
isolation. 
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The  self-test  scheme  could,  therefore,  provide  a  cost- 
effective  FID  in  future  electronic  type  control  applica¬ 
tions.  Its  major  disadvantage  is  that  it  is  not  techni¬ 
cally  feasible  for  hydromechanical  control  applications. 

All  of  the  FID  schemes  discussed  above  are  provided  as  BIT 
equipment  in  the  control  unit.  They  require  no  ground 
test  equipment  and,  except  for  the  self-test  scheme,  re¬ 
quire  no  ground  power  supply.  They  also  provide  a  simple 
GO/NO-GO  test  for  failure. 

From  the  trade-off  analysis,  based  upon  the  information 
given  in  Tables  V  and  VI,  we  conclude  that  BIT  fault- 
isolation  schemes  are  unable  to  meet  the  established  cost- 
effectiveness  goals  because  they  require  a  costly,  high- 
performance,  electronic  computer  to  provide  minimum  fault 
isolation  effectiveness.  The  only  exception  is  the  self¬ 
test  scheme  for  electronic  controls,  which  makes  efficient 
use  of  the  electronic  computer  and  sensors  already  incor¬ 
porated  in  an  electronic  type  fuel  control. 

The  remaining  FID  schemes  in  Tables  V  and  VI  require  GTE 
and  a  power  supply.  Their  primary  advantage  over  the  BIT 
schemes  is  that  the  high-performance  electronic  computer 
can  be  incorporated  in  the  GTE,  which  can  be  shared  by  up 
to  five  aircraft.  The  cost  of  the  electronics  can  there¬ 
fore  be  shared  by  as  many  as  seven  fuel  control  units 
which  would  be  required  to  support  five  aircraft.  Elec¬ 
tronic  sensors  and  interfacing  connectors  must,  of  course, 
be  provided  for  each  control  unit.  This  approach  leads  to 
a  significant  reduction  in  total  FID  cost  per  control  unit 
while  still  providing  highly  effective  fault  isolation. 

The  chief  disadvantage,  inherent  in  all  GTE  fault-isolation 
schemes,  is  that  the  maintenance  personnel  must  obtain  the 
ground  test  unit  and  connect  it  to  the  fuel  control  and  the 
ground  power  supply  before  the  fuel  control  can  be  tested. 
This  setup  time  will  be  considerably  longer  than  for  a  BIT 
system;  and  during  busy  intervals,  a  ground  test  unit 
might  not  be  immediately  available.  This  situation  could 
induce  maintenance  personnel  to  revert  to  the  present 
troubleshooting  procedure  of  changing  the  fuel  control 
units,  thereby  negating  the  purpose  of  the  FID  scheme. 
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Of  the  several  GTE  fault-isolation  schemes  evaluated,  the 
recorded  fuel  flow  concept  is  the  least  costly  for  both 
hydromechanical  and  electronic  type  fuel  control  applica¬ 
tions.  Although  its  cost  falls  well  within  the  maximum 
allowable  cost  for  FID  applications,  it  suffers  from  the 
serious  disadvantage  of  requiring  complex  calibration 
curves  and  technical  analysis.  It  is  doubtful  if  mainte¬ 
nance  personnel  could  conveniently  use  this  system.  The 
ground  integrated  test  equipment  (GITE)  scheme  avoids  this 
problem  by  applying  the  model  reference  concept,  discussed 
above,  to  the  GTE  unit.  Although  its  cost  per  control  unit 
is  slightly  higher  than  the  cost  constraint,  it  requires 
minimal  operating  skills.  For  this  reason,  the  GITE  scheme 
is  recommended  for  current  hydromechanical  fuel  control 
fault  isolation. 

FID  Descriptions 

Preliminary  details  of  the  seven  potential  fault-isolation 
schemes  discussed  in  the  foregoing  paragraphs  are  included 
in  the  following  sections.  Each  includes  a  schematic 
block  diagram  of  the  functional  requirements  of  the  scheme 
with  a  brief  description  of  the  requirements  necessary  for 
incorporation  into  an  aircraft  maintenance  structure. 

This  is  followed  by  a  detailed  evaluation  of  the  selected 
GITE  system  including  hardware  and  cost  requirements. 

1.  Dual  Control  Concept 

In  this  concept,  fault  isolation  is  obtained  by 
providing  redundant  controls  (Figure  22) .  Both 
controls  are  in  operation;  however,  only  one  is 
controlling  the  engine  fuel  flow  (WF)  and  inlet 
guide  vane  (IGV)  .  The  other  control,  though  phys¬ 
ically  disconnected  from  and  IGV,  continues  to 
receive  the  same  input  signals  for  computing  WF 
and  IGV. 
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Figure  22.  Dual  Fuel  Control  FID 


Solenoid-operated  fuel  shutoff  valves  are  provided 
in  the  Wp  output  line  of  each  control  to  allow 
manual  on/off  switching  of  metered  fuel  flow  to 
the  engine.  Similarly,  solenoid-operated  clutches 
enable  manual  connect/disconnect  of  the  control 
IGV  output  shaft  to  engine  IGV  shaft.  For  the  on¬ 
line  control,  the  fuel  solenoid  valve  is  normally 
open,  and  the  IGV  clutch  soJenoid  is  normally 
closed.  Conversely,  a  normally  closed  solenoid 
valve  and  a  normally  open  solenoid  clutch  are  pro¬ 
vided  for  the  Wp  and  IGV  outputs  of  the  standby 
control.  The  standby  control  is  therefore  discon¬ 
nected  from  the  engine  until  current  is  supplied 
to  the  solenoids. 

Current  is  supplied  to  the  solenoids  from  the  air¬ 
frame  DC  power  supply  by  closing  the  test  switch, 
preferably  located  in  the  cockpit.  When  this  is 
done,  WF  and  IGV  inputs  to  the  engine  are  switched 
from  the  on-line  fuel  control  (#1)  to  the  standby 
fuel  control  (#2) .  A  test  lamp  indicates  when  the 
engine  is  operating  on  the  standby  fuel  control. 

If  the  engine  is  malfunctioning,  the  on-line  fuel 
control  can  be  tested  for  failure  by  switching  to 
the  standby  control.  If  the  engine  operates  prop¬ 
erly  on  the  standby  control,  then  the  fault  must 
obviously  be  in  the  on-line  fuel  control,  which 
should  be  removed  for  repair.  If  engine  malfunc¬ 
tioning  continues  after  switching  to  standby  con¬ 
trol,  then  the  fault  is  not  with  the  control. 

The  fault-isolation  function  can  be  used  both  in 
ground  maintenance  testing  and  in  actual  flight; 
it  requires  no  special  test  procedure.  In  addi¬ 
tion  to  fault  isolation,  dual  fuel  controls  also 
provide  redundancy  and,  therefore,  enhance  mission 
reliability  and  safety.  The  pilot  can  switch  to 
the  standby  fuel  control  if  he  suspects  that  the 
on-line  fuel  control  is  malfunctioning. 

The  dual  fuel  control  concept  can  be  applied  to 
electronic  type  controls,  as  well  as  hydromechani¬ 
cal,  and  to  present  in-production  controls,  as 
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well  as  to  future  fuel  controls  if  installation 
provisions  are  available.  Its  primary  liabilities 
are  that  it  more  than  doubles  the  cost  and  volume 
of  the  fuel  control  function,  and  is  therefore  the 
most  costly  of  the  several  concepts  which  have 
been  evaluated. 

Estimated  cost,  size  and  weights  for  the  dual  hydro¬ 
mechanical  and  dual  electronic  FID  are  summarized 
below.  Estimates  are  given  in  percentage  of  the 
fuel  control  unit  cost,  size  and  weight. 

Dual  Hydromechanical  Fuel  Control  FID 


Component 

Cost 

Size 

Weight 

Hydromech.  Fuel  Control 

100 

100 

100 

Solenoid  Clutches 

1.4 

1.5 

5 

Solenoid  Valves 

1.4 

1.5 

5 

Indicator 

0.2 

Negli- 

Negli¬ 

qible 

gible 

Total 

103.0 

103.0 

110 

Effectiveness :  Approaches 

100% 

Dual  Electronic  Type  Fuel 

Control 

FID 

Component 

Cost 

Size 

Weight 

Electronic  Type  Fuel 

Control 

100 

100 

100 

Solenoid  Clutches 

1.4 

3.0 

10 

Solenoid  Valves 

1.4 

3.0 

10 

Indi^ ..  tor 

0.3 

Negli¬ 

Negli¬ 

gible 

gible 

Total 

103.1 

106.0 

120 

Effectiveness:  Approaches  100% 


2.  Model  Reference  Fault  Isolation 


a.  Hydromechanical  Fuel  Control 

In  the  model  reference  concept,  fault  isola¬ 
tion  depends  upon  the  measurement  of  unaccept¬ 
able  fuel  control  performance.  Control  per¬ 
formance  is  measured  by  comparing  control 
output  signals,  in  this  case  Wp  and  IGV  posi¬ 
tion,  with  corresponding  signals  computed  by 
an  electronic  model  of  the  correctly  performing 
control.  The  model  must  be  supplied  with  the 
same  inputs  as  the  fuel  control.  Therefore, 
in  a  hydromechanical  application,  all  control 
inputs  and  outputs  must  be  transduced  into 
appropriate  electrical  input  signals  to  the 
fault-isolation  electronics.  In  addition,  the 
FID  electronics  is  provided  with  its  own  engine- 
driven  alternator  and  regulated  power  supply, 
so  that  it  can  operate  independently  of  air¬ 
frame  power  (see  Figure  23) . 

From  the  control  input  signals,  the  fault- 
isolation  electronics  computes  the  desired  fuel 
flow  (WF*)  and  IGV  position  (IGV*).  Actual 
fuel  flow  Wp  is  computed  in  the  fault-isolation 
electronics  from  fuel  control  metering  valve 
position  (xm) ,  measured  by  an  LVDT  position 
transducer,  and  the  pressure  drop  across  the 
main  metering  valve  (AP)  measured  by  a  differ¬ 
ential  pressure  sensor.  The  computed  actual 
fuel  flow  (Wp)  is  then  compared  with  the  de¬ 
sired  fuel  flow  (Wp*)  .  Any  deviation  of  W^, 
from  Wp*  generates  an  error  signal,  Ep,  which 
is  the  measure  of  fuel  flow  control  performance. 
Similarly,  the  deviation  of  measured  IGV  from 
IGV*  produces  the  error  signal,  Ey,  which  is 
the  measure  of  IGV  control  performance. 

Low-pass  filtering  is  provided  for  both  error 
signals  before  they  are  supplied  to  the  thresh¬ 
olds  fault-detection  circuits.  Low-pass  filter¬ 
ing  is  required  to  suppress  transient  error 
signals  due  to  unavoidable  circuit  noise  and 
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Figure  23.  Model  Reference  FID  for  Hydromechanical  Control 


dynamic  mismatch  between  the  control  and  the 
reference  model.  The  threshold  detection  cir¬ 
cuits  receive  the  filtered  error  signals  and 
compare  their  amplitude  with  preset  positive 
and  negative  threshold  limits.  If  the  signal 
amplitude  remains  within  the  preset  limits, 
the  control  is  assumed  to  be  performing  prop¬ 
erly.  On  the  other  hand,  if  the  signal  ampli¬ 
tude  exceeds  either  positive  or  negative 
thresholds,  then  performance  is  assumed  to  be 
degraded  due  to  failure  in  the  control  and  the 
failure  lamp  lights  to  indicate  this  condition 
to  the  operator. 

A  finite  error  signal  is  produced  during  nor¬ 
mal  operation  by  unavoidable  static  as  well  as 
dynamic  mismatch  between  the  model  reference 
and  actual  control.  The  threshold  levels  must 
be  set  high  enough  so  that  the  failure  detec¬ 
tion  circuits  will  not  be  tripped  during  normal 
operation,  thereby  inadvertently  indicating 
failure.  However,  if  the  threshold  levels  are 
set  too  high,  the  system  will  be  insensitive  to 
performance  degradation  produced  by  failures. 
These  ambiguities  must  be  avoided  by  designing 
the  model  reference  to  match  normal  control 
response  as  closely  as  possible.  This  insures 
that  error  signal  excursion  during  normal  oper¬ 
ation  will  be  small,  so  only  actual  control 
failures  can  produce  error  signals  that  are 
large  enough  to  turn  on  the  failure  lamp. 

Model  reference  fault  isolation,  like  the  dual 
controls  concept,  can  be  used  in  both  ground 
maintenance  testing  and  actual  flight.  It  re¬ 
quires  no  special  test  procedure.  Its  ability 
to  check  control  performance  allows  it  to  be 
used  to  detect  incipient  failures  which  first 
reveal  themselves  by  producing  small  losses  in 
performance  which  might  otherwise  go  unnoticed. 
The  model  reference  approach  does  not  provide 
redundant  fuel  controls  as  does  the  dual  con¬ 
trol  concept  and  can  be  used  only  as  an  FID. 
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Although  significantly  lower  in  cost  and  size 
than  dual  controls,  it  is  still  a  fairly  ex¬ 
pensive  approach  to  fault  isolation,  primarily 
because  it  requires  a  high-performance  elec¬ 
tronic  computer  to  provide  the  model  reference; 
and  in  the  case  of  hydromechanical  controls, 
electromechanical  sensors  are  required  for  all 
control  input/output  signals. 

b.  Electronic  Type  Fuel  Controls 

Model  reference  fault  isolation  can  be  applied 
to  electronic  type  controls  in  either  of  two 
ways  as  illustrated  by  Figures  24  and  25.  The 
approach  illustrated  in  Figure  24  provides  the 
fault-isolation  electronics  with  its  own  input 
sensors  and  power  supply.  Model  reference 
computation  in  the  FID  is  essentially  the  same 
as  control  signal  computation  in  the  actual 
control.  Therefore,  the  FID  provides  the  con¬ 
trol  with  dual  input  sensors,  a  power  supply, 
and  an  electronic  computer.  In  the  electronic 
application,  the  control  is  usually  provided 
with  output  sensors  for  transducing  MMV  and 
IGV  positions  into  electrical  signals  which 
can  be  used  to  compute  WF  and  IGV  for  compari¬ 
son  with  WF*  and  IGV*  in  the  FID.  However, 
a  differential  pressure  sensor  is  still  re¬ 
quired  to  transduce  the  metering  valve  pressure 
drop  into  an  electrical  signal. 

Dual  input  sensors,  a  power  supply,  and  an 
electronic  computer  enable  the  FID  in  this 
application  to  respond  to  any  failure  in  the 
actual  control  which  degrade:'  its  performance, 
including  sensor  and  power  svpply  failures. 
Output  sensors  need  not  be  redundant  because 
their  failure  will  produce  an  error  signal  in 
the  FID.  The  model  reference  FID  functions 
the  same  way  in  electronic  type  controls  as  in 
the  hydromechanical  application,  and  provides 
the  same  advantages.  Its  requirement  for  re¬ 
dundant  input  sensors  and  an  electronic  com¬ 
puter  produces  a  proportionally  higher  impact 
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Figure  24.  Model  Reference  FID  for  Electronic  Type  Control. 


on  control  cost,  weight,  and  size.  The  added 
weight  and  volume  are  the  same  as  in  the 
hydromechanical  application;  however,  elec¬ 
tronic  type  controls  are  lighter  and  smaller. 

The  concept,  presented  in  Figure  25,  produces 
a  significant  cost  reduction  from  the  fully 
redundant  system  of  Figure  24  by  using  the 
electrical  power  and  sensors  from  the  engine 
control  for  model  reference  computation. 
Therefore,  only  the  electronic  computer  need 
be  duplicated  in  the  control.  The  model  ref¬ 
erence  FID  in  this  application  would  be  de¬ 
signed  to  be  responsible  to  input  sensor  or 
power  supply  faults  by  using  a  computing  tech¬ 
nique  in  the  FID  that  is  different  from  the 
computation  methods  used  in  the  control. 

Hydromechanical  Fuel  Control  Model 

Reference  FID 


Component 

Cost 

Size 

Weiqht 

Electronics 

38.6 

17.2 

11.7 

Sensors 

12.4 

6.4 

5.6 

Alternator 

1.0 

5.4 

8.4 

Indicator 

0.2 

Negli¬ 

gible 

Negli¬ 

gible 

Total 

52.2 

29.0 

25.7 

Effectiveness:  99  -  99.8% 
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Electronic  Type  Fuel  Control  Model  Refer¬ 
ence  FID 

(Redundant  Sensor  and  Power  Supply) 


Component 

Cost 

Size 

Weight 

Electronics 

38.6 

34.4 

23.3 

Sensors 

10.8 

9.4 

9.0 

Alternator 

1.0 

10.8 

16.7 

Indicator 

0.2 

Negli¬ 

Negli¬ 

gible 

gible 

Total 

50.6 

54.6 

49.0 

Effectiveness:  99  to  99.8% 


Electronic  Fuel  Control  Model  Reference 
FID 

(Utilizes  Sensor  and  Power  Supply  From  the 
Fuel  Control) 


Component 

Cost 

Size 

Weight 

Electronics 

38.6 

34.4 

23.3 

Sensors 

1.2 

2.6 

1.6 

Indicator 

0.2 

NegJ i- 

Negli¬ 

gible 

gible 

Total 

40.0 

37.0 

24.9 

Effectiveness:  95  -  99.4% 


3.  Threshold  Reference  FID 

a.  Hydromechanical  Fuel  Control 

The  Threshold  Reference  Fault  Isolation  Device 
(TRFID)  ,  Figure  26,  for  a  hydromechanical  con¬ 
trol  is  designed  to  respond  to  critical  gross 
performance  degradation  modes  in  the  fuel  con¬ 
trol  rather  than  to  a  change  in  measured  per¬ 
formance.  The  TRFID  indicates  failure  only 
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Figure  26.  Threshold  Reference  FID  for  Hydrome chan i cal  Control 


when  measured  fuel  flow  exceeds  preset  limits 
during  start,  deceleration,  Nj  idling,  and  N2 
governing  operation.  It  is  not  responsive  to 
performance  degradations  that  occur  in  other 
than  the  selected  operating  modes. 

Referring  to  the  system  block  diagram  shown  in 
Figure  26  and  the  fuel  schedules  shown  in 
Figure  27,  the  TRFID  operates  as  follows: 

Main  metering  valve  position  (Xn)  (which  is 
proportional  to  fuel  flow  Wp)  ,  metering  valve 
pressure  drop  (AP) ,  gas  generator  speed  (Np) , 
power  turbine  speed  (N2) ,  compressor  inlet 
pressure  (P2)  *  and  compressor  inlet  tempera¬ 
ture  (T2)  are  sensed  by  the  appropriate  trans¬ 
ducers  and  supplied  as  electrical  input  signals 
to  the  TRFID  electronic  package.  and  N2  are 

used  to  compute  the  upper  and  lower  limits  on 
WF  for  normal  operation  during  start  to  engine 
idling  and  during  N2  governing.  These  limits 
are  generated  as  segmented  straight-line  func¬ 
tions  of  Ni  and  N2  (see  Figure  27) .  P2  and  T2 
are  used  as  bias  signals  to  compensate  these 
limits  for  altitude  and  temperature  changes. 

WHl  and  WL1  provide  the  upper  and  lower  bounds 
on  Wp  for  normal  starts  and  decelerations, 
while  WH2  and  WL2  similarly  set  the  upper  and 
lower  bounds  on  Wf,  for  normal  operation  during 
N2  governing.  WA,  together  with  WHl,  defines 
the  operating  region  in  which  the  power  turbine 
governor  normally  controls  the  engine.  Sim¬ 
ilarly,  upper  GVH  and  lower  GVL  bounds  are 
computed  for  IGV  position  schedule. 

The  computed  Wp  and  IGV  limits,  together  with 
the  measured  WF  and  IGV,  are  supplied  to 
threshold  detectors.  Here,  measured  Wp  and 
IGV  are  compared  with  the  boundary  signals. 

If  measured  Wp  or  IGV  is  lower  or  higher  than 
the  boundary  signal,  a  corresponding  threshold 
logic  signal  will  be  switched  to  zero  or  one, 
respectively.  A  threshold  logic  signal  is 
provided  for  each  upper  and  lower  bound  on  Wp 
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and  IGV,  and  also  for  the  upper  and  lower 
bounds  (NH  and  NL)  of  the  N^  speed  range  in 
which  the  TRFID  is  operational. 

The  threshold  logic  signals,  VL  through  NH, 
together  with  the  Nj_*  speed  select,  N2*  speed 
select,  AP,  and  reset  switching  signals  are 
supplied  as  inputs  to  the  TRFID  logic.  The 
output  of  the  TRFID  logic  is  several  lamps; 
i.e.,  IGV  test,  Nj_  test,  N2  test  and  failure. 

In  addition,  a  flag  is  provided  with  each  lamp. 

When  the  operator  sets  N-^*  and  N2*  for  engine 
idling  and  the  engine  is  above  maximum  cranking 
speed  (NL)  ,  the  TRFID  will  check  out  the  accei- 
eration/deceleration  and  Nj_  droop  schedule. 

This  operation  is  indicated  to  the  operator  by 
the  lit  N]_  test  lamp.  If  Wf  exceeds  the  upper 
WHl  or  lower  WLl  bounds,  the  TRFID  logic  will 
switch  the  failure  lamp  on,  and  both  failure 
and  N^  test  will  be  flagged  until  the  reset 
button  is  pressed. 

If  WF  remains  within  its  normal  operating  bounds 
throughout  the  N^  test  period,  the  operator  may 
proceed  with  the  N2  governing  and  IGV  test  by 
setting  N-^*  and  N2*  to  the  power  position  (P). 
When  the  engine  is  operating  in  the  range  where 
Wp  is  less  than  WA,  but  higher  than  WHl,  and  N^ 
is  less  than  100%  speed  (NH) ,  then  the  TRFID 
logic  switches  the  N2  test  lamp  ON,  indicating 
that  the  N2  governor  droop  and  IGV  schedule  are 
being  checked  out.  Again,  if  Wp  should  exceed 
its  normal  upper  and  lower  bounds  ( WH2  and  WL2) 
during  this  operation,  the  TRFID  logic  switches 
on  the  failure  lamp  and  both  failure  and  N2  test 
will  be  flagged  until  the  reset  button  is 
pressed.  Similarly,  if  IGV  should  exceed  its 
normal  bounds  ( GVH  or  GVL)  ,  the  IGV  lamp  as  well 
as  the  failure  lamp  switches  ON.  Failure  of 
AP  signal  during  either  test  will  also  cause 
the  failure  lamp  to  switch  ON. 
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In  concluding,  it  should  be  pointed  out  that 
the  TRFID  will  perform  only  from  engine  idling 
up  to  approximately  20%  power  or  when  is 
between  top  cranking  speed  and  80%.  It  would 
be  advisable  to  press  the  reset  button  before 
each  test  to  ensure  that  the  TRFID  logic  is 
not  locked  into  a  failure  condition  due  to  a 
previous  operation  or  a  power  transient.  The 
TRF ID  is  provided  with  its  own  engine-driven 
alternator  and  regulated  power  supply.  It  can 
therefore  operate  independently  of  airframe  or 
GSE  power. 

In  the  hydromechanical  control,  the  TRFID  must 
be  provided  with  the  same  input  and  output 
sensors  as  in  the  model  reference  concept,  but 
it  requires  far  simpler  fault-isolation  elec¬ 
tronics.  The  TRFID  technique  obtains  circuit 
simplicity  and  thereby  lower  cost  by  sacrific¬ 
ing  the  broad  performance  and  operating  range 
possible  with  the  model  reference  technique. 

The  TRFID  performance  level  depends  upon  the 
extent  to  which  actual  failure  in  the  fuel 
control  produces  the  critical  performance  deg¬ 
radation  modes  to  which  the  TRFID  is  sensitive. 
In  considering  the  overall  system  performance, 
it  seems  that  a  majority  of  component  failures 
will  produce  either  excessively  high  or  exces¬ 
sively  low  fuel  flow  during  acceleration,  de¬ 
celeration,  or  droop  governing  in  the  pre¬ 
mission  engine  idling  (I)  or  80%  speed  (P) 
modes. 
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Hydromechanical  Fuel  Control  With 
Threshold  Reference  FID 


Component 

Cost 

Size 

Weiqht 

Electronics 

12.2 

9.0 

6.0 

Sensors 

5.1 

4.6 

3.6 

Alternator 

1.0 

5.4 

8.4 

Indicator 

0.2 

Negli¬ 

Negli¬ 

gible 

gible 

Total 

18.5 

19.0 

18.0 

Effectiveness:  80  -  90% 

b.  Electronic  Type  Fuel  Controls 

The  TRFID  concept  can  be  applied  to  electronic 
type  controls  as  illustrated  by  Figure  28 . 

Since  the  primary  objective  of  the  threshold 
reference  approach  is  to  reduce  cost,  the 
TRFID,  in  this  application,  uses  the  fuel  con¬ 
trol  power  supply  and  sensor  signals.  The  only 
additional  sensor  required  by  the  TRFID  is  a 
differential  pressure  transducer  for  sensing 
AP  across  the  main  metering  valve.  Otherwise, 
TRFID  function  and  signal  processing  in  elec¬ 
tronic  type  controls  is  similar  to  that  in 
hydromechanical  applications. 

The  TRFID  will  be  sensitive  to  failures  occur¬ 
ring  in  the  control  computer  and  fluid  con¬ 
troller  which  produce  the  critical  performance 
degradations  to  which  the  TRFID  is  sensitive. 
For  effective  fault  isolation  with  this  TRFID 
concept,  it  is  necessary  that  most  of  the  high- 
probability  failures  that  occur  in  electronic 
type  controls  fall  into  this  category. 
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Figure  28.  Threshold  Reference  FID  for  Electronic  Type  Control. 


Electronic  Type  Fuel  Control  With 
Threshold  Reference  FID 


Component 

Cost 

Size 

Weiqht 

Electronics 

12.2 

18.0 

12.0 

Sensor 

1.2 

2.6 

1.6 

Indicator 

0.2 

Negli¬ 

Negli¬ 

gible 

gible 

Total 

13.6 

20.6 

13.6 

Effectiveness:  80  -  90% 

4.  Failure  Signature  Sensing 
a.  Vibration 

Diagnostics  by  means  of  vibration  spectrum 
analysis  has  been  applied  successfully  to  gas 
turbine  engines.  This  has  correctly  indicated 
incipient  wear  and  deterioration  in  rotating 
parts  such  as  main  engine  bearings,  fans,  tur¬ 
bines  and  compressor  blades  and  stators,  and 
accessory  gearboxes  and  drives.  It  follows 
that  such  techniques  could  be  applied  to  the 
rotating  parts  of  the  fuel  control  unit  with 
perhaps  equal  success  in  correctly  diagnosing 
wear  and  deterioration.  Fuel  control  parts 
which  may  fall  into  this  classification  would 
be : 


Gas  generator  speed  drive  coupling 

Power  turbine  speed  drive  coupling 

Fuel  pump  primary  gear  assembly 

Fuel  pump  secondary  gear  assembly 
(if  applicable) 

All  rotating  servo  valve  assemblies 
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Governor  flyweights  (gas  generator  and 

power  turbine) 

All  speed  drive  bearings 

Figure  29  is  a  block  diagram  of  the  type  of 
hardware  configuration  required  for  this  type 
of  analysis.  The  complexity  of  the  system  re¬ 
quired  is  apparent,  and  estimates  based  on 
presently  available  commercial  equipment  indi¬ 
cate  that  it  would  be  far  too  costly  for  this 
application  alone.  For  systems  which  already 
include  vibration  analysis  for  indicating  en¬ 
gine  deterioration,  including  the  fuel  control 
and  pump  in  the  analysis  would  probably  be 
cost  effective.  However,  confirmation  that 
the  relevant  vibration  signals  lend  themselves 
to  such  an  analysis  would  be  necessary  before 
a  final  decision  could  be  made.  This  would 
require  correlating  experimental  vibration 
data  taken  from  faulty  fuel  controls  with  that 
taken  from  healthy  ones . 

b.  Sonic  Analysis 

Sonic  analysis  is  very  similar  to  vibration 
analysis  and  in  general  covers  the  same 
range  of  fault  diagnosis.  In  some  cases,  a 
signal  is  better  received  in  audio  rather  than 
vibratory  form,  but  generally  vibration  has 
shown  more  potential  for  engine  health  analy¬ 
sis.  The  cost  of  a  sonic  analyzer  can  be  ex¬ 
pected  to  be  of  the  same  order  as  a  vibration 
analyzer,  and  therefore  the  possibility  of 
using  both  systems  for  optimum  performance  can 
be  disregarded  completely.  For  these  reasons 
sonic  analysis  of  fuel  controls  has  not  been 
considered  further. 

c.  Fluid  Pressures 

By  monitoring  the  following  fuel  pressures, 
indications  of  fuel  control  deterioration  in 
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Figure  29.  Vibration  Analysis  Block  Diagram. 


the  pumping  and  regulating  sections  may  be 
evident: 

Pressure  drop  across  pump  inlet  filter 
Pressure  drop  across  metering  valve 
Pressure  drop  across  servo  flow  filter 
Servo  flow  fluid  pressure 
Pump  inlet  pressure 
Pump  exit  pressure 

d.  Fluid  Temperatures 

Efficiency  losses  through  deterioration  of 
rotating  parts  invariably  result  in  increased 
temperatures.  However,  this  parameter  would 
apparently  offer  no  more  information  than 
could  be  obtained  by  a  vibration  analysis. 

In  addition,  separation  of  temperature  rises 
resulting  from  deteriorating  parts  from  those 
caused  by  the  many  other  variables  which  may 
influence  the  fluid  and  metal  temperatures 
would  be  involved,  calling  for  complex  and  ex¬ 
pensive  hardware.  Complexity  and  limited  diag 
nostic  information  preclude  this  from  further 
consideration. 

e.  Filter  Particle  Analysis 

By  filtering  the  fuel  control  output  flow  and 
periodically  analyzing  the  particle  count,  an 
indication  of  excessive  fuel  control  or  pump 
wear  may  be  evident.  Ruptured  or  worn  seals 
resulting  in  excessive  filtered  particles  of 
the  seal  material  could  indicate  imminent  in¬ 
ternal  or  external  leaks.  Metal  particles 
may  indicate  wear  in  pump  gears,  drive  splines 
servo  valves,  flyweights,  bearings  or  cams  and 
followers.  Particle  sizes  greater  than  50 
microns  could  be  removed  at  the  pump  inlet  by 
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a  suitably  sized  filter,  while  a  coarse  filter 
in  the  metered  fuel  outlet  line  could  collect 
particle  sizes  greater  than  100  microns. 
Automatic  monitoring  of  particle  count,  al¬ 
though  possible,  would  be  far  too  costly  for 
this  application.  It  would  therefore  be 
necessary,  as  part  of  a  scheduled  maintenance 
routine,  to  send  the  hermetically  sealed  fil¬ 
ter  to  a  laboratory  for  microscopic  analysis. 

Although  this  system  shows  promise  for  fuel 
control  condition  analysis,  it  would  obviously 
not  lend  itself  to  rapid  fault  isolation  and 
diagnosis.  Also,  a  large  percentage  of  the 
random  fuel  control  faults  that  occur  would 
not  be  detected  by  this  system. 

Conclusion 

It  is  apparent,  when  looking  for  characteristic 
failure  signatures  in  fuel  controls,  that  only  a 
small  percentage  of  all  failures  show  these  types 
of  impending  telltale  signs. 

The  majority  of  failures  occur  in  the  fuel  control 
computing  sections,  and  in  these  cases  manifesta¬ 
tion  is  in  performance  only.  A  typical  example, 
taken  from  actual  operational  data,  is  a  material 
chemical  reaction  which  caused  a  slow  growth  in  a 
compressor  inlet  temperature  bellows.  Eventually 
this  caused  the  engine  performance  to  noticeably 
deteriorate.  There  appears  little  possibility  of 
detecting  this  type  of  deterioration  by  any  sig¬ 
nature  other  than  fuel  control  performance  meas¬ 
urement.  For  fault-isolation  effectiveness,  it 
is  imperative  that  a  majority  of  potential  fail¬ 
ures  be  recognized.  Therefore,  it  is  necessary 
for  absolute  performance  measurements  to  be  used 
to  achieve  this  objective,  and  no  advantage  will 
be  gained  by  also  using  failure  signature  sensing 
in  the  isolated  cases  where  it  is  applicable. 
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Hydromechanical  Fuel  Control  With  Failure 
Signature  Sensing  FID 

Fuel  Control  Unit  Installation  (Sensors) 


Type 

Cost 

Size 

Weiqht 

Vibration 

3.6 

Negli¬ 

Negli¬ 

Servo  Pressure 

1.7 

gible 

1.3 

gible 

0.8 

Regulated  Pressure 

1.2 

1.3 

0.8 

Filter  Pressure 

1.2 

1.3 

0.8 

Connector 

0.1 

0.5 

0.3 

Total  for  Fuel 

Control  Installation 

7.8 

4.4 

2.7 

Ground  Test  Unit  (Electronics) 


Type  Cost 

Vibration  50 

Servo  pressure  3 

Regulated  Pressure  3 

Filter  Pressure  1 

Total  for  Ground  Test 
Unit  Electronics  57 


Ground  test  unit  can  serve  5  aircraft  or 
7  control  units,  including  2  spares. 

Therefore : 

57 

Electronics  cost  per  control  unit  =  —  =8.1 

8 

Total  cost  per  control  unit  =  7.8  +  8.1  =  15.9 
Effectiveness:  10  -  20% 
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Electronic  Type  Fuel  Control  With  Failure 
Signature  Sensing  FID 

Fuel  Control  Unit  Installation  (Sensors) 


Type 

Cost 

Size 

Weight 

Vibration 

3.6 

Negli¬ 

Negli¬ 

Servo  Pressure 

1.7 

gible 

2.6 

gible 

1.6 

Regulated  Pressure 

1.2 

2.6 

1.6 

Filter  Pressure 

1.2 

2 . 6 

1.6 

Connector 

0.1 

1.0 

0.6 

Total  for  Control 

Unit  Installation 

7.8 

8.8 

5.4 

Ground  Test  Unit  (Electronics) 


Type  Cost 

Vibration  50 

Servo  Pressure  3 

Regulated  pressure  3 

Filter  Pressure  1 

Total  for  Ground  Test 
Unit  Electronics  57 


Ground  test  unit  can  serve  5  aircraft  or 
7  control  units  including  2  spares. 
Therefore : 


Electronics  cost  per  control  unit  =  —  =  8.1 
Total  cost  per  control  unit  =  7.8  +  8.1  =  15.9 
Effectiveness:  10  -  20% 
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5.  Fuel  Control  Self  Test 


Built-in  self  test  is  not  viable  for  hydromechani- 
cal  and  pneumatic  fuel  controls.  An  accurate 
mechanical  drive  source  would  be  required  to  de¬ 
velop  the  necessary  fluid  and/or  air  pressures  for 
computer  operation,  and  this  would  require  some 
type  of  clutch  assembly  in  the  accessory  gearbox 
to  allow  the  selection  of  an  alternate  ground  sup¬ 
port  power  drive.  This  also  means  dependence  on 
ground  support  equipment,  which  immediately  de¬ 
tracts  from  any  advantage  the  system  may  have  over 
full  ground  support  test  equipment. 

For  electronic  type  fuel  controls  which  will  prob¬ 
ably  be  introduced  by  the  late  seventies,  built-in 
self  test  appears  to  offer  a  definite  advantage. 
Figure  30  i s  a  block  diagram  of  a  typical  elec¬ 
tronic  fuel  control  system  with  built-in  self  test 
as  shown.  All  functional  elements  of  the  elec¬ 
tronic  control  are  checked  for  correct  operation 
by  attempting  to  drive  the  metering  valve  to  a  de¬ 
sired  set  position  and  comparing  this  to  the  actual 
position  indicated  by  the  feedback  metering  valve 
position  transducer.  The  advantage  of  this  system 
is  the  relative  ease  and  low  cost  of  incorporation. 
Also,  the  engine  is  not  required  to  be  running, 
thereby  avoiding  any  likelihood  of  overstressing 
the  engine  while  troubleshooting  the  fuel  control. 
That  is,  a  fault  in  the  fuel  control  which  may 
have  caused  excessive  internal  engine  temperatures 
can  be  detected  without  the  risk  of  further  over- 
temperaturing  the  engine. 

In  conjunction  with  the  self-test  facility  for  the 
computing  section  of  the  fuel  control,  the  system 
will  also  include  a  fluid  controller  fault  isola¬ 
tion  scheme.  This  relies  on  measuring  the  pres¬ 
sure  drop  across  the  metering  valve  and  comparing 
it  to  the  desired  regulated  pressure  drop.  Devi¬ 
ations  outside  allowable  tolerances  will  cause  the 
system  to  activate  a  NO-GO  flag.  This  portion  of 
fault  isolation  requires  the  engine  to  be  running. 
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REGULATOR 


As  a  combination,  this  system  should  offer  a  high 
confidence  level  not  only  in  fault-isolation 
effectiveness  but  also  in  the  operability  of  the 
control  by  using  the  self  test  as  a  preflight 
verification  check-out. 


Electronic  Type  Fuel  Control  With  Self- 
Test  FID 


6 . 


Component  Cost 

Electronics  5.0 

Sensor  1 . 2 

Total  6.2 

Effectiveness:  90  -  95% 


Recorded  Fuel  Flow  Analysis 


Size 


9.0 

2.6 

11.6 


Weight 

6.0 

1.6 


7.6 


Figure  31  indicates  a  system  in  which  the  fuel 
control  has  been  instrumented  for  fuel  flow  rate 
and  gas  generator  rotor  speed.  The  outputs  are  in 
the  form  of  DC  voltages  which  are  used  as  the  Y  and 
X  inputs  to  a  plotter.  During  ground  fault  isola¬ 
tion,  the  maintenance  technician  connects  the  plot¬ 
ter  to  the  fuel  control  unit  and  plots  fuel  flow 
versus  speed  for  a  specific  engine  st;  .  accel, 
decel  procedure.  He  then  selects  the  a  propriate 
template  performance  trace  for  the  specific  atmos¬ 
pheric  temperature  and  pressure,  and  checks  the 
recorded  trace  against  the  specified  limits.  The 
advantage  of  this  system  is  its  simple  mechaniza¬ 
tion,  low  cost  (see  Tables  V  and  VI),  and  the  minor 
modifications  that  would  be  required  of  present-day 
operational  controls.  The  main  disadvantages  are 
in  the  setup  time  and  analysis  required,  and  also 
in  the  limitations  of  the  check-out.  Start,  accel¬ 
eration  and  deceleration  fuel  flows  can  be  checked 
with  a  high  degree  of  confidence,  but  there  may 
still  be  a  degree  of  ambiguity  in  closed-loop  gov¬ 
ernor  performance  when  instability  exists.  The 
number  of  templates  required  would  depend  on  the 
accuracy  of  the  check-out.  Typically,  40  templates 


102 


Figure  31.  FID  by  Recorded  Performance  Analysis 


would  give  a  resolution  of  20 °F  in  temperature 
and  0.5  psi  in  atmospheric  pressure.  This  could 
be  reduced  considerably  once  the  ground  operating 
base  was  established.  That  is,  for  a  base  at  a 
given  elevation,  variations  in  atmospheric  tem¬ 
perature  and  pressure  will  be  considerably  less 
than  the  ceilings  specified  for  worldwide  use. 

Electronic  Type  Fuel  Control  With  Recorded 

Fuel  Flow  FID 


Fuel  Control  Unit 

Installation 

Component 

Cost 

Size 

Weiqht 

Electronics 

2.2 

3.4 

2.1 

Sensors 

1.2 

2.6 

1.6 

Connector 

0.1 

1.0 

0.6 

Total  for  Control 

Unit  Installation 

3.5 

7.0 

4.3 

Ground  Test  Unit  (XY  Recorder) 

Ground  Tesc  Unit  cost  =  7.0 

Ground  test  unit  can  serve  5  aircraft  or 
7  fuel  control  units  including  spares. 
Therefore : 

7  0 

Cost  per  control  unit  =  -yy  =1.0 

Total  cost  per  control  unit  =  3.5  4-  1.0 
=  4.5 

Effectiveness:  80  -  85.0% 
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Hydrome chan i cal  Fuel  Control  With  Recorded 
Fuel  Flow  FID 

Fu e 1  Control  Unit  Instal lation 


Component 

Cost 

Size 

Weiqht 

Electronics 

3.2 

2.5 

1.5 

Sensors 

2.1 

2.6 

1.6 

Connector 

0.1 

0.5 

0.3 

Total  for  Fuel 

Control  Installation 

5.4 

5.6 

3.4 

Ground  Test  Unit  (XY  Recorder) 

Cost  per  test  unit  =  7.0 

Ground  test  unit  can  serve  5  aircraft  or 
7  fuel  contro.!  units  including  spares. 
Therefore : 

7  0 

Cost  per  control  unit  =  — —r  =  l.o 

/  •  vj 

Total  cost  per  control  unit  =  5.4  +  1.0 
=  6.4 

Effectiveness:  80  -  85.0% 

7.  Ground  Integrated  Test  Equipment  (GITE) 

Figures  32  and  33  indicate  fault  isolation  using 
comprehensive  ground  equipment  for  a  hydromechan¬ 
ical  and  an  electronic  fuel  control  respectively. 
Each  fuel  control  unit  is  instrumented  for  all 
signals  necessary  for  complete  performance  diag¬ 
nosis  . 

Typically,  a  hydromechanical  fuel  control  would 
require  magnetic  speed  pickups  located  at  the  pump 
and  the  power  turbine  governor  drive  splines  re¬ 
spectively,  a  linear  variable  differential  trans¬ 
former  (LVDT)  for  measuring  the  metering  valve 
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Figure  32.  Ground  Integrated  Test  FID  for  Hydromechanical  Control. 


ELECTRONIC  TYPE  FUEL  CONTROL  GROUND  SUPPORT  TEST  UNIT 


107 


Figure 


displacement,  rotary  variable  differential  trans- 
former^  for  PLA,  N2*  and  IGV  positions,  and  pres¬ 
sure  sensors  for  measuring  metering  valve  differ¬ 
ential  pressure  and  compressor  inlet/outlet  pres¬ 
sure.  An  electrical  connector  at  the  fuel  control 
housing  is  used  to  interface  the  sensors  to  the 
ground  test  equipment. 

The  ground  test  unit  contains  the  power  supplies, 
signal  processing  circuits,  fuel  control  model 
reference  comparator,  and  failure  detection  circuit 
plus  a  control  panel  with  the  necessary  functional 
test  switches.  To  functionally  verify  the  opera¬ 
tion  of  the  test  equipment,  a  self-test  feature 
has  been  included  as  part  of  the  ground  test  unit. 
By  selecting  self  test  at  the  control  panel,  the 
operator  can  verify  the  operation  of  each  fuel 
control  check  mode.  Any  failure,  either  in  self 
test  or  during  actual  fuel  control  operational 
checks,  will  be  indicated  by  a  NO-GO  lamp  at  the 
control  panel.  Assuming  the  availability  of  the 
test  unit  at  the  aircraft,  the  fuel  control  check¬ 
out  time  is  estimated  at  a  maximum  of  25  minutes. 
This  allows  for  removal  of  the  engine  cowling, 
connecting  the  unit  to  the  fuel  control,  a  self¬ 
test  verification  check,  and  the  functional  test 
in  which  the  engine  is  started,  accelerated  to  80% 
speed,  and  decelerated  to  flight  idle.  Faults 
which  prevent  the  engine  from  starting  would  be 
detected  as  an  incorrect  start  fuel  flow  while  the 
engine  was  being  turned  over  by  the  starting  mech¬ 
anism,  and  would  be  indicated  at  the  control  panel 
of  the  test  unit. 

The  GITE  concept  provides  highly  effective  fault 
isolation  by  using  the  model  reference  technique 
for  testing  control  unit  performance.  It  avoids 
the  high  cost  of  the  model  reference  concept  by 
providing  electronic  computation  in  the  GITE  unit, 
the  cost  of  which  is  shared  by  several  fuel  con¬ 
trol  units. 
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Hydromechanical  Fuel  Control  With  Ground 
Integrated  Test  Equipment  FID 

Fuel  Control  Unit  Installation 


(Enqine  Sensors) 

Component 

Cost 

Size 

Weight 

Sensors 

• 

in 

4.2 

3.8 

Connector 

0.1 

0.5 

0.3 

Total  for  Control 

Unit  Installation 

00 

• 

LO 

4.7 

4.1 

Ground  Test  Unit 
(Electronics  +  Atmos. 

Sensors) 

Component 

Cost 

Electronics 

31 

Sensors 

_2 

Total  for  ground  test 
unit 

33 

Ground  test  unit  can  serve  5  aircraft  or 
7  control  units  including  spares. 
Therefore : 

Ground  test  unit  cost  per  control  unit 


Total  cost  per  control  unit  =  4.7  +  5.8 
=  10.5 

Effectiveness:  99  -  99.8% 
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Electronic  Type  Fuel  Control  With  Ground 
Integrated  Test  Equipment  FID 

Fuel  Control  Unit  Installation 
(Engine  Sensors) 


Component 

Cost 

Size 

Weight 

Sensors 

5.7 

• 

00 

7.6 

Connector 

0.1 

1.0 

0.6 

Total  for  Control 
Unit  Installation 

5.8 

9.4 

8.2 

Ground  Test  Unit 
(Electronics) 

Cost  per  test  unit  =  31 

Ground  test  unit  can  serve  5  aircraft  or 
7  control  units  including  spares. 
Therefore: 

Ground  test  unit  cost  per  control  unit 


Total  cost  per  control  unit  =  4.4  +  5.8 

=  10.2 

Effectiveness:  99  -  99.8% 
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Ground  Integrated  Test  Equipment  (GITE) 


In  the  preceding  section,  a  preliminary  evaluation  of  a  number 
of  FID  concepts  established  that  the  GITE  scheme  is  the  only 
cost-effective  concept  applicable  to  present  hydromechanical 
fuel  controls.  This  section  provides  a  more  detailed  evalua¬ 
tion  of  the  GITE  system  for  the  purpose  of  providing  better 
estimates  of  its  cost,  size  and  weight  impact  upon  the  fuel 
control  unit,  and  to  establish  its  operational  requirements  in 
the  maintenance  procedure.  The  evaluation  is  based  upon  a 
preliminary  design  of  the  GITE  described  below. 

Figure  32  provided  a  system  block  diagram  of  the  GITE  depict¬ 
ing  its  major  components,  their  location,  and  their  interrela¬ 
tionships.  The  basic  philosophy  of  the  GITE  concept  is  mani¬ 
fest  in  this  figure.  All  the  transducers  required  for  sensing 
fuel  control  inputs  and  outputs  are  located  in  the  fuel  con¬ 
trol  unit  except  for  the  and  T^  transducers.  These  two 
sensors  are  located  in  the  Ground  Support  Test  Unit  (GSTU) 
since  their  purpose  is  to  provide  atmospheric  condition  inputs 
to  the  fuel  control  model  reference  unit  and  since  testing  is 
always  performed  on  the  ground.  The  output  of  these  sensors 
should  be  the  same  in  magnitude  as  the  P2  ard  T2  inputs  to  the 
fuel  control.  The  control  unit  is  also  provided  with  a  single 
electrical  connector  and  shielded  cable  through  which  all  of 
the  transducers  are  connected  to  the  electronics  located  in 
the  GSTU. 

The  GSTU  includes  all  of  the  electronics  required  for  fault 
isolation,  signal  processing,  electrical  power  supplies,  test 
controls,  and  fault  indicators  as  well  as  the  P-^  and  T-^  atmos¬ 
pheric  sensors.  The  GSTU  can  be  shared  by  as  many  as  five  air¬ 
craft.  Because  all  of  the  complex  electronics  required  for 
effective  fault  isolation  are  located  in  this  package,  its 
cost  can  be  shared  by  as  many  as  seven  fuel  control  units, 
thereby  substantially  reducing  the  unit  cost. 

Sensors 


Nine  sensors  in 
puts.  Seven  of 
unit,  while  two 
temperature  are 
sors  are  listed 


all  are  required  to  provide  the  GITE  in- 
these  must  be  built  into  the  fuel  control 
for  measuring  atmospheric  pressure  and 
installed  in  the  GSTU.  The  selected  sen- 
in  Table  VII,  which  also  gives  their 
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accuracy,  range,  power  input,  size,  weight,  cost,  etc. 

The  cost  of  the  sensors  also  includes  the  estimated  cost 
of  installation  and  calibration. 

The  location  of  the  built-in  sensors  in  the  fuel  control 
unit  and  the  means  by  which  they  are  coupled  to  the  hydro¬ 
mechanical  mechanisms  are  depicted  schematically  in  Fig¬ 
ure  34.  The  mechanical  means  for  coupling  the  three  sen¬ 
sors  measuring  angular  position  and  the  sensor  measuring 
metering  valve  position  already  exist  in  the  control  unit, 
so  these  sensors  can  be  directly  connected  to  the  control 
unit.  The  speed  sensors  require  no  direct  mechanical  coup¬ 
ling  and  need  only  be  inserted  at  appropriate  locations. 

The  AP  sensor  can  be  mounted  on  the  outside  surface  of  the 
control  unit  and  receives  regulated  pressure  through  ports 
already  provided  in  the  control  unit  housing.  Sensor  coup¬ 
ling  requirements,  therefore,  have  only  a  negligible  im¬ 
pact  on  control  unit  size,  weight:  and  cost. 

The  cost,  size  and  weight  of  off-the-shelf  sensors  in  lots 
of  250  units  were  obtained  from  various  manufacturers' 
brochures,  and  this  data,  including  assembly  and  test  cost, 
is  tabulated  in  Table  VII.  To  these  values  we  must  add  the 
cost,  size  and  weight  of  the  connector  and  harness.  The 
increase  in  cost,  size  ai  d  weight  per  control  unit,  due  to 


sensor  installation,  is: 

Cost  Size  Weight 

. .  -I SI  (cu.-inj.  Ub) 

Built-in  Sensors  402.00  7.8  0.57 

Cornector  and  Harness  10 . 00  3 . 0  0 . 25 

Total  per  Control  Unit  412.00  10.8  0.82 


The  sensors  located  in  the  GSTU  impact  control  unit  cost 
indirectly  but  do  not  change  the  control  unit  size  and 
weight . 
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Electronics 


The  primary  function  of  GITE  electronics  is  to  compute, 
from  the  control  and  atmospheric  input  signals,  the  cor¬ 
rect  metering  valve  (fuel  flow)  and  IGV  positions,  to 
compare  the  computed  values  with  measured  values,  and  to 
indicate  to  the  operator  whether  the  measured  outputs  are 
within  or  outside  acceptable  error  limits. 

To  provide  this  function,  the  GITE  must  include  in  its 
electronics  an  accurate  simulation  of  the  fuel  control 
system  functions.  Referring  to  the  system  block  diagram. 
Figure  32,  fuel  control  simulation  is  supplied  by  the  Fuel 
Control  Model  Reference  Unit,  and  fault-isolation  signal 
processing  is  provided  by  the  Failure  Detector  in  the  GSTU. 

A  functional  block  diagram  which  includes  both  the  fuel 
control  simulations  and  the  fault  isolation  is  given  by 
Figure  35.  The  functional  block  diagram  details  the  math¬ 
ematical  operations  which  must  be  performed  by  the  elec¬ 
tronics  to  provide  fault  isolation.  Each  block  generates 
an  output  related  to  its  input (s)  by  the  graphical  or 
algebraic  funccion  included  in  the  block.  Most  of  these 
are  arbitrary  functions  of  one  or  two  input  signals.  The 
input/output  lines  represent  only  information  flow  paths 
and  not  electrical  interconnections.  The  functional  block 
diagram  does  not  include  signal  conditioning  functions, 
which  in  the  actual  electronic  circuit  design  may  be  re¬ 
quired  to  convert  input  signal  to  a  form  which  is  compati¬ 
ble  with  the  operation  of  the  function  generating  circuits. 
These  functions  are  larcely  included  in  the  Sensor  Excita¬ 
tion  and  Signal  Conditioning  unit  of  the  GSTU. 

The  fuel  control  simulation  genera  ;es  output  signals  pro¬ 
portional  to  the  desired  metering  valve  and  IGV  positions, 
for  checking  the  performance  of  the  control  during  accel¬ 
eration,  deceleration,  governing  and  N2  governing. 

The  measured  fuel  control  output  signals  Xm,  IGV,  and  AP, 
together  with  the  computed  desired  outputs  xm*,  IGV*,  and 
AP*,  are  supplied  as  inputs  to  the  fault-isolation  func¬ 
tion,  where  they  are  summed  to  generate  the  error  signals 
Ef,  Ep,  and  Ey.  These  signals  are  measures  of  fuel  control 
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Figure  35.  Fuel  Control  Model  Reference  Unit  and 

Failure  Detection  Functional  Block  Diagram. 


performance.  Each  error  signal  is  filtered  to  eliminate 
spurious  transient  errors  due  to  circuit  noise  and  dynamic 
mismatch.  The  filtered  error  signal  is  then  supplied  as 
an  input  to  the  threshold  function  generator.  If  the 
error  signal  falls  within  the  upper  (EH)  and  lower  (EL) 
error  limits,  the  threshold  output  switches  to  low  (o)  . 

If  the  error  signal  is  higher  than  EH  or  lower  than  E^, 
the  threshold  output  switches  to  high  (1).  All  of  the 
threshold  outputs  are  supplied  as  inputs  to  the  OR  logic 
and  lamp  driver  function,  which  will  switch  the  indicator 
to  NO-GO,  indicating  a  failed  control,  if  any  one  of  its 
inputs  is  high  (1).  If  all  of  the  inputs  are  low  (o) ,  the 
indicator  is  switched  to  GO,  indicating  that  the  control 
unit  under  test  is  performing  correctly. 

Mechanization 


The  basic  building  blocks  for  the  GITE  electronics  are  the 
solid-state  modules  listed  in  Table  VIII.  These  modules 
are  constructed  of  integrated  circuits  (IC)  and/or  discrete 
semiconductor  devices,  mounted  on  printed  circuit  boards 
(PCBs)  and  interconnected  by  printed  wiring.  Each  module, 
using  either  analog,  pulse  width,  or  digital  signal  pro¬ 
cessing,  provides  a  specific,  though  limited,  computational 
logic  or  signal  conditioning  operation. 

The  GITE  electronics  can  be  constructed  to  provide  the 
functions  described  in  the  preceding  section  by  properly 
interconnecting  appropriate  computational  and  logic  mod¬ 
ules.  Also,  signal  conditioning  can  be  provided  where  re¬ 
quired  in  the  electronics  by  incorporating  the  appropriate 
signal  conditioning  modules.  The  use  of  both  analog  and 
digital  techniques  in  signal  processing,  and  direct  elec¬ 
trical  interconnections  of  modules,  characterizes  the  GITE 
electronics  as  a  hard-wired  hybrid  computer.  The  cost  of 
a  hard-wired  hybrid  electronic  computer  is  usually  signi¬ 
ficantly  lower  than  that  of  a  programmable  digital  elec¬ 
tronic  computer  providing  the  same  functions. 

Table  VIII  summarizes  the  function,  operation  and  construc¬ 
tion  of  each  module  used  in  the  GITE  electronics  design. 
Because  modular  functions  are  relatively  simple,  they  can 
be  generated  either  by  known  electronic  circuits  or  by 
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DC  Power 
Supply 


Off-the-shelf  standard 
modules  constructed  of 
1C  and  discrete  com¬ 
ponents,  bracket  ass'y. 


Crystal  controlled  IC 
oscillator.  Hybrid  con¬ 
struction. 


Sine/ Cosine 
Generator 


DC  Output 
Amplifier 


Converts  ground  power 
(AC  or  DC)  into  ♦  15 
VDC  and  +5  VDC.  Regulated 
power  supplies  for  test 
unit  electronics. 


Generates  square  wave  at  ±  0.005 
clock  (Ref. )  Freq.  from 
+5  VDC.  includes  countdown 
circuits. 


Generates  sine/cosine  sig¬ 
nals  from  osc.  sq.  wave 
for  driving  resolvers 


Number 

Production 

Required 

Coat  per 

per 

Nodule 

Test  Set 

(Dollars) 

Discrete  &  1C  compo¬ 
nents,  PCB  assembly. 


Phase  Discrete  components 

Demodulator  PCB  assembly. 


Amplifies  low  level  DC 
signal. 


Frequency 

to  DC 

Converter 


Discrete  &  ic  compo¬ 
nents.  PCB  assembly. 


Converts  square  wave  input1!  0.25 
signal  into  DC  output 
signal  proportional  to 


DC  to  Fre¬ 
quency 
Converter 
(VCO) 

Discrete  &  ic  compo¬ 
nents.  PCB  assembly. 

!  Converts  DC  input  signal 
i  to  proportional  square 
,  wav«  frequency  in  output 
signal. 

±  0.2S 

DC  to 

Pulse  Width 
Converter 

Discrete  &  ic  conpo- 
nents.  PCB  assembly. 

Converts  DC  input  to 
proportional  square  wave 
pulse  width  synchronized 
with  clock  frequency. 

±  0.25 

Signal 

Processor 


apeea 

Signal 

Processor 


Discrete  &  ic  compo¬ 
nent,  PCB  assembly. 


I  Converts  change  in  ther-  ±  o.25 
|  mister  resistance  due  to 
temperature  to  an  output 
j  voltage  proportional  to  >/9, 


i  Converts  low-level,  sinus-  ±  0.1  or 
oidal  speed  signal  to  better 

I  square-wavs  signal  with 
same  frequency. 


Shifter 

Discrete  &  ic  compo¬ 
nents,  PCB  assembly. 

Generates  phase 

Ac  input  signal 

ahift  in 

1  t  1.0 

TABLE  VIII.  (Cont.) 

Module 

Construction 

Funct ion 

Accuracy 
(%  F.S. 
Error) 

Number 

Required 

P« 

Test  Set 

Production 
Cost  per 
Module 
(Dollars) 

Production 
Cost  per 
Test  unit 
(Dollars) 

2-D  Function 

Generator 

Discrete  &  1C  compo¬ 
nents,  ROM's  for  coupler 
functions,  PCB  assembly. 

Generates  a  DC  output 
signal  which  is  a  prepro¬ 
grammed  function  of  a 
single  DC  input  signal 

±  0.5  to 
±  5.0 
depending 
on  func¬ 
tion 

6 

120.00 

720.00 

3-D  Function 
Generator 

Discrete  A  IC  compo¬ 
nents,  ROM's  for  complex 
functions,  PCB  assembly. 

Generates  a  DC  output 
signal  which  is  a  prepro¬ 
grammed  function  of  two 
inputs,  one  of  which  is  a 
DC  signal  and  the  other 
a  frequency  modulated 
siqnal. 

t  0.5  to 
±  5.0 
depending 
on  func¬ 
tion 

4 

150.00 

600.00 

Multiplier 

Discrete  A  IC  compo¬ 
nents.  PCB  assembly. 

Provides  DC  output  pro¬ 
portional  to  the  product 
of  a  pulse  width  input 
signal  with  a  frequency 
input  signal. 

1  0.25 

4 

50.00 

200.00 

Integrator 

IC  and  discrete  compo¬ 
nents,  PCB  assembly. 

Provides  DC  output  which 
is  proportional  to  the 
time  integral  of  the  DC 
input  signal. 

±  2.0 

1 

6.00 

6.00 

Sumner 

Discrete  A  IC  compo¬ 
nent*  ,  PCB  assembly. 

Generates  DC  output 
which  is  proportional  to 
sum  or  difference  of  DC 
input  signals. 

1  0.25 

7 

5.00 

35.00 

Signal 

Select 

Discrete  A  IC  compo¬ 
nents.  PCB  assembly. 

Provides  DC  output  sig-<* 
nal  which  is  either  the 
highest  or  the  lowest  of 
two  or  more  DC  input 
signals. 

<0.01 

4 

10.00 

40.00 

Low-pass 

Filters 

Discrete  components. 

PCB  assembly. 

Filters  noise  and  tran¬ 
sients  in  input  signal. 

<0.01 

1 

1.50 

1.50 

Comparators 

IC  component. 

DC  output  signal  is 
switched  "high"  or  "low" 
depending  upon  which  of 
two  DC  inputs  exceeds 
the  other. 

<0.01 

6 

5.00 

30.00 

Nor  Gates 

IC  component 

Switches  output  signal  to 
"LOW"  if  any  one  of  two 
or  more  input  signals  are 
"HIGH*; 

Not 

Applicable 

1 

3.00 

3.00 

Lamp 

Driver 

Discrete  components, 

PCB  assembly 

Supplies  current  to  lamp 
filament  when  DC  input 
signal  is  switched  to 

LOW. 

Not 

Applicable 

2 

5.00 

10.00 

Lamp 

Assembly 

Includes  lamp  holder 
and  lamp 

Indicates  GO  or  NO-GO 
condition  to  operator. 

Not 

Applicable 

2 

1.00 

2.00 

TEST  CONTROL  UNIT  COST  TOTAL  -  $2,123.00 
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off-the-shelf  electronic  components.  Therefore,  reasonably 
good  estimates  of  their  cost  and  accuracy  can  be  made.  The 
accuracy,  number  required  and  estimated  cost  per  module  are 
given  for  each  module  listed  in  Table  VIII.  The  cost  per 
module  also  includes  assembly  and  calibration  costs.  From 
this  data  the  total  cost  of  the  GITE  electronics  is  esti¬ 
mated  and  given  at  the  bottom  of  Table  VIII.  Since  the 
GSTU  includes  atmospheric  sensors  (see  Table  VII),  and  the 
interconnecting  cable  as  well  as  the  GITE  electronics,  the 
cost  of  these  components  must  be  added  to  the  cost  of  the 
electronics  to  obtain  the  total  cost  of  the  GSTU  estimated 
below. 


Component 


Total  Cost  ($) 


Electronics 
ATM.  Sensors 
Connecting  Cable 


2,123.00 

200.00 

27.00 


Total  Cost  of  GSTU 


2,350.00 


The  GSTU  can  be  shared  by  up  to  five  aircraft  or  up  to 
seven  control  units  including  two  spares;  therefore,  its 
cost  per  control  unit  is  one-seventh  of  its  total  cost,  or 
approximately  $336.00.  Adding  this  value  to  the  previously 
estimated  cost  of  the  control  unit  built-in  sensors  gives 
the  total  cost  per  control  unit  for  the  GITE  fault-isola¬ 
tion  system,  estimated  below: 

Component  Cost  per  Control  Uhit  ($) 

GSTU  336.00 

Built-in  Sensor  412 . 00 

Total  Cost  per  Control  748.00 

Unit  of  GITE 


Operation 

Figures  36,  37,  and  38  are  modular  block  diagrams  of  the 
Sensor  Excitation  and  Signal  Conditioning  Model  Reference 
Unit,  and  Failure  Detector  Components  of  the  GITE  system. 
The  purpose  of  the  modular  block  diagrams  is  to  illustrate 
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SENSORS 


CONTROL  SWITCHING  SIGNAL  PROCESSING  OUTPUTS 


Figure  36.  Sensor  Excitation  and  Signal  Conditioning 
Modular  Block  Diagram. 
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T  ION 


Figure  37.  Fuel  Control  Model  Reference  Unit  Modular  Block  Diagram 
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Figure  38.  Failure  Detector  Modular  Block  Diagram. 


the  electronic  modules  and  interconnections  necessary  for 
generating  the  functions  given  in  Figure  35.  Unlike  the 
functional  block  diagrams,  the  modular  representation  in¬ 
cludes  the  signal  conditioning  required  to  convsrt  input 
signals  into  a  form  compatible  with  the  signaling  require¬ 
ments  of  the  computational  and  logic  modules.  Also,  input/ 
output  lines  correspond  actual  electrical  signal  paths, 
although  power  and  grounu  connections  and  specific  wiring 
data  are  not  included. 

Sensor  output  signals  are,  in  general,  not  directly  appli¬ 
cable  as  inputs  to  the  model  reference  unit  electronics. 

The  single  exception  is  the  P2  sensor,  which  provides  a 
high-level  DC  .  The  remaining  sensor  signals  are  converted 
into  usable  forms  in  the  Sensor  Excitation  and  Signal  Con¬ 
ditioning  Component  of  the  GITE  System.  The  modules  pro¬ 
viding  these  conversions  are  illustrated  in  Figure  38. 

This  component  also  includes  control  switcning  and  self¬ 
test  circuits,  which  are  discussed  in  the  next  section. 

The  function  of  the  Fuel  Control  Model  Reference  Unit  is 
to  generate  the  desired  metering  valve  position  »n*  and  the 
IGV  position  IGV*.  Figure  37  illustrates  how  the  elec¬ 
tronic  modules  are  used  to  compute  these  output  signals. 

The  electrical  interconnections  in  Figure  37  are  labeled 
the  same  as  their  corresponding  information  flow  paths 
given  in  the  functional  block  diagram  for  the  model  refer¬ 
ence  unit  on  Figure  35.  In  addition,  the  modular  block 
diagram  also  indicates  the  signal  form  (DC,  PW,  or  FREQ)  . 

Signal  conditioning  modules  are  also  included  in  the  model 
reference  unit  electronics.  These  are  required  because 
some  of  the  computational  modules  require  input  signals  in 
a  form  other  than  DC,  although  they  all  generate  a  DC  out¬ 
put  signal. 

As  an  example,  the  acceleration  function  Xfri*A£C  is  gen¬ 
erated  as  a  DC  output,  whereas  the  inputs  to  the  accelera¬ 
tion  function  generator  (see  Table  VIII  for  an  explanation 
of  the  operation  of  this  module)  include  a  DC  signal  cor¬ 
responding  to  measured  inlet  temperature  T2,  and  a  fre¬ 
quency  modulated  signal  corresponding  to  measured  gas 
generator  speed  (N^) .  Similarly,  the  select  high-output¬ 
mode  signal  is  supplied  as  a  DC  signal  to  the  multiply 
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module,  and  the  signal  corresponding  to  the  P2  pressure  is 
a  PW  signal.  Since  the  pressure  function  is  generated 
as  a  DC  signal  by  the  2D  function  generator,  it  is  neces¬ 
sary  to  first  convert  it  into  a  PW  signal  by  including  a 
DC  to  pulse  width  generator.  The  output  of  the  multiply 
module  is  a  DC  signal  corresponding  to  the  desired  meter¬ 
ing  valve  position  xm*. 

Figure  38  gives  the  modular  design  of  the  failure  detector 
component.  In  this  component,  all  inputs,  signals,  and 
signal  processing  are  in  DC  form.  The  desired  and 
measured  control  unit  output  signals  are  supplied  to  the 
(  +  )  and  (-)  inputs  of  the  SUM  module.  The  output  of  the 
SUM  module  is  the  error  signal.  The  low-pass  filter, 
which  is  treated  as  a  separate  module,  can  also  be  included 
in  the  SUM  module.  The  filtered  error  signal  is  compared 
to  a  high  and  a  low  threshold  value.  If  the  error  signal 
is  greater  or  less  than  the  threshold  values,  then  one  of 
the  two  comparators  will  switch  to  a  high  output  signal 
(1). 

The  outputs  of  all  the  comparators  are  supplied  to  the  OR 
logic  circuit,  which  consists  of  two  NOR  gates  whose  out¬ 
puts  are  connected  to  effect  a  single  NOR  function.  This 
output  is  supplied  directly  to  the  NO-GO  lamp  driver  and 
to  the  GO  lamp  driver  through  an  inverter  circuit.  If  all 
the  logic  inputs  are  low,  indicating  that  all  error  signals 
have  passed  the  threshold  test,  then  the  NOR  circuit's 
output  is  high  and  the  lamp  driver  supplying  the  NO-GO 
lamp  will  switch  its  current  OFF.  Since  this  NOR  circuit 
output  signal  is  inverted  before  being  supplied  to  the  GO 
lamp  driver,  this  lamp  driver  will  receive  a  low  input 
and  thereby  switch  the  GO  lamp  current  ON.  If  any  one  of 
the  error  signals  fails  the  threshold  test,  then  the  NOR 
circuit  output  signal  will  be  low,  thereby  switching  on 
the  NO-GO  lamp  current  and  switching  off  the  current  to 
the  GO  lamp  by  the  logic  described  above. 

Self  Test 


The  GSTU  is  provided  with  a  self-test  feature  which  is  in¬ 
corporated  in  the  sensor  excitation  and  signal  condition¬ 
ing  component  (see  Figures  32  and  36)  .  The  self-test 
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feature  enables  the  maintenance  personnel  to  check  out  the 
GITE  for  correct  operation  before  using  it  to  test  the  con¬ 
trol  unit.  The  self-test  c.  eck  is  included  in  the  normal 
maintenance  procedure  and  immediately  precedes  the  control 
unit  test.  This  will  ensure  a  high  level  of  confidence  in 
the  control  unit  test  results. 

The  self-test  procedure  is  best  described  by  referring  to 
Table  IX,  which  gives  the  switching  requirements  for  self 
test,  and  to  the  modular  block  diagram,  Figure  36.  The 
operator  places  the  GITE  into  self-test  operation  by  pres¬ 
sing  the  self-test  push-button  switch  on  the  control  panel. 
This  action  switches  the  GSTU  sensed  parameter  input  lines 
from  the  sensor  signals  to  the  self-test  sensed  parameter 
settings.  The  sensed  parameter  settings  are  provided  as 
bias  signals  in  the  GITE  electronics  (see  Figures  36  and 
37)  .  The  particular  bias  signal  that  is  switched  on  to 
each  sensed  parameter  input  line  depends  upon  which  self¬ 
test  operating  mode  switch  is  actuated.  The  operater  can 
select  any  of  the  six  self-test  operating  modes  by  pres¬ 
sing  the  appropriate  push-button  switch.  The  mode  select 
switches  are  mechanically  interconnected  so  that  one  of  the 
six  switches  is  always  closed.  The  particular  set  of  bias 
signals  provided  for  a  selected  mode  is  processed  by  the 
GITE  electronics  as  legitimate  sensed  parameters.  Since 
the  bias  signals  always  represent  the  correct  sensed  param¬ 
eter  values  for  the  selected  control  mode,  the  GITE  elec¬ 
tronics,  if  it  is  operating  correctly,  should  give  a  GO 
indication  to  the  operator.  If  the  operator  receives  a 
NO-GO  indication  in  self-test,  it  means  that  the  GITE  is 
providing  incorrect  test  results  and  should  not  be  used  to 
test  the  fuel  control  unit. 

The  self-test  bias  signals  are  scaled  to  be  commensurate 
with  sensed  parameter  values  that  are  typical  for  a  selec¬ 
ted  mode.  The  sensed  parameter  settings  for  each  test 
mode  are  listed  in  Table  IX.  The  operator  carries  out  the 
self-test  by  selecting  each  test  mode  in  sequence.  The 
operator  need  not  select  test  modes  in  any  sequence,  and 
he  can  repeat  any  of  the  test  modes  as  often  as  he  finds 
necessary.  If  he  receives  a  GO  signal  for  all  test  modes, 
he  can  proceed  with  the  fuel  control  unit  test.  Although 
it  is  not  shown  in  the  circuitry,  the  IGV  error  signal  is 
disabled  until  the  IGV  test  mode  switch  is  activated. 
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TABLE  IX.  SWITCHING  REQUIREMENTS  FOR  SELF  TEST 


Sensed  Parameter  Settings 


Test  i 
Mode  Ap  X 


N2  Gov 


Decel 


X  (2) 
m 


xu) 

m 


X  (4) 
m 


PLA 

* 

N2 

N2 

IGV 

PLA(l) 

n2*(D 

0 

0 

II 

II 

0 

0 

II 

II 

0 

0 

II 

II 

V11 

0 

PLA ( 2 ) 

II 

II 

0 

II 

II 

II 

IGV (1) 

nl(1) 


^(2) 


Typically:  Ap(i) 

18  psi 

PLA  ( 1 ) 

= 

maximum 

PLA  (  2 ) 

= 

flight  idle 

N2*(1) 

= 

90% 

n2(1> 

= 

91% 

IGV(l) 

= 

30° 

V1’ 

= 

15  psi 

Tx(l) 

= 

59  °F 

N1  ( 1 ) 

= 

70%  (IGV  closed  at  55°) 

Nx(2) 

= 

92%  (IGV  open  at  0°) 
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DESIGN  ANALYSIS 


Failure  Modes 


With  consideration  of  the  failure  modes  of  wear  contamina¬ 
tion,  incorrect  adjustments,  and  leakage,  the  T53  control 
was  studied,  the  goal  being  to  eliminate  the  design  defi¬ 
ciencies  and  to  increase  the  time  between  overhauls  to 
5,000  hours. 

The  main  areas  of  wear  of  the  control  are  evident  at  over¬ 
haul.  They  are: 

Control  drive  spline 

N^  flyweight  drive  coupling 

N?  flyweight  drive  coupling 

The  solution  to  the  control  drive  wear  problem  has  already 
been  found  and  demonstrated.  With  a  material  change  from 
nitrided  steel  AMS  6475  to  Greek  Ascaloy  AMS  5616,  the  life 
in  service  will  be  increased  by  a  factor  of  three.  It  is 
preferable  to  chrome  plate  the  wear  surfaces  0.0001  to 
0.0002  inch  for  extra  corrosion  and  fretting  resistance. 

The  design  of  the  control  drive  shaft  is  shown  on  Figure  39. 

The  N-^  and  N2  flyweight  drive  coupling  wear  is  due  to  fret¬ 
ting.  The  solution  to  this  problem  is  to  increase  the  area 
of  engagement  of  the  coupling.  The  designs  for  both  the 
and  N2  coupling  have  been  demonstrated  and  are  shown  on 
Figures  40  and  41 . 

Another  problem  experienced  on  the  T53  control  is  with  the 
P2  bellows.  The  main  problem  is  due  to  long-term  growth 
which  causes  a  decrease  in  fuel  flow.  A  secondary  problem 
is  shift  in  calibration  with  change  in  air  temperature. 

The  bellows  is  a  phosphor  bronze  soldered  assembly,  and 
investigation  showed  that  the  growth  problem  was  due  to 
chemical  reaction  of  the  zinc  chloride  flux  with  the  copper 
base  bellows  material,  and  also  the  reaction  of  the  flux 
with  the  silicone  oil  which  is  used  for  vibration  damping. 
The  bellows  calibration  shift  with  air  temperature  was  due 
to  the  ingress  of  air  during  the  evaluation  process. 
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Figure  39.  Control  System  Drive  Shaft  (AMS  5616) 
(TA-2  Control  Model). 
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Section  A-fl 


Section  B-B 


Figure  40.  Gas  Generator  Governor  Drive  Coupling  Modification 
(TA-2  Control  Model), 
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The  bellows  problem  has  been  demonstrated  to  be  solved  by 
using  a  stainless  steel  welded  assembly  as  shown  on  Fig¬ 
ure  42.  This  design  has  successfully  completed  extensive 
endurance  cycling  and  vibration  testing. 

It  is  to  be  noted  that  the  control  drive,  and  N2  fly¬ 
weight  coupling,  and  P2  bellows  changes  were  submitted 
individually  and  finally  by  Lycoming  in  a  package  on  Aug¬ 
ust  22,  1972.  The  recommended  changes  could  all  be  intro¬ 
duced  at  overhaul. 

It  is  estimated  that  with  the  incorporation  of  the  above 
changes,  a  time  between  overhauls  of  5,000  hours  would  be 
possible  except  for  the  remaining  problems  of  seal  leakage 
and  fuel  contamination.  The  effect  of  fuel  contamination 
can  be  seen  by  comparing  the  T53  control  in  commercial 
service,  with  a  TBO  of  2,500  hours,  with  an  identical  unit 
in  military  service,  with  a  TBO  of  1,800  hours. 

The  cost  savings  that  result  from  requiring  less  control 
overhauls  is  $12,400  per  control  for  the  life  of  a  control, 
considering  that  the  control  has  a  10-year  life,  500  flight 
hours  per  year,  and  a  TBO  of  5,000  hours. 

Aircraft  Mishaps  Reported  as  Being  Caused  by  the  Gas 
Turbine  r  el  Controls 

An  attempt  i.as  been  made  to  determine  if  design  deficien¬ 
cies  exist  which  make  control  systems  unsafe.  USAAVS, 

Fort  Rucker,  provided  aircraft  mishap  information  in  which 
the  gas  turbine  control  system  was  involved.  A  summary  of 
the  information  is  as  follows: 

1.  The  reporting  period  was  17  January  1967  to 
13  November  1972. 

2.  One  hundred  fifty  mishaps  were  reported  (a  mishap 
is  defined  as  an  event  in  the  categories  of  acci¬ 
dent,  incident,  forced  landing,  or  precautionary 
landing) . 
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3. 


In  general,  no  significant  damage  resulted  from 
the  mishaps.  However,  between  2  April  1968  and 
8  July  1971,  40  mishaps  occurred  involving  total 
damage  of  $5,150,289.  The  cost  of  the  damage 
was  in  the  following  percentages: 

50.0%  UH-1H/1B/1C  &  AH-1G 

40.0%  OH-6A 

7 . 5%  CH-47A/47C 

2.5%  OH- 58 

These  percentages  may  be  directly  related  to  the 
number  of  flight  hours  involved. 

4 .  No  information  was  given  in  the  computerized 

USAAVS  report  to  identify  specific  design  defi¬ 
ciencies  which  may  be  hazardous.  EIR  numbers 
(Equipment  Improvement  Recommendations)  were  ref¬ 
erenced  in  30  of  the  40  cases.  However,  none  of 
these  numbers  could  be  identified  at  AVSCQM  because 
of  a  change  in  the  EIR  numbering  system. 

Recommendations  and  Conclusions 


It  is  concluded  that  a  time  between  overhaul  of  5,000  hours 
is  realizable  provided  the  external  leakage  problem  is 
solved  and  u.ltrafine  filtration  is  provided. 

It  is,  therefore,  recommended  that  a  test  program  be  set 
up  to  investigate: 

1.  Seal  materials  and  seal  designs 

2.  Ultrafine  filtration 

It  is  also  recommended  that  a  test  program  be  set  up  to 
investigate  the  effects  of  a  realistic  vibration  spectrum 
on  the  control  system  calibration.  It  is  usual  to  provide 
a  vibration  search  for  resonances.  However,  it  is  thought 
that  some  of  the  failures  or  calibration  shifts  in  service 
that  are  not  found  at  the  initial  factory  calibration  may 
be  due  to  the  effect  of  vibration  conditions  when  the  con¬ 
trol  is  mounted  on  the  engine  and/or  in  the  air  vehicle. 
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Figure  42.  Welded  Stainless  Steel  P  Bellows  Assembly 
(TA-2  Control  Model). 
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Fault  Isolation 


Operational  Use  of  GITE 

A  discussion  of  the  use  of  the  GITE  in  maintaining  the 
Army's  gas  turbine  engine  fuel  controls,  together  with 
its  operational  impact  on  the  present  maintenance  require¬ 
ments,  is  included  herewith. 

1.  Test  Procedure 

At  the  organization  level,  suspected  fuel  control 
related  gas  turbine  engine  system  malfunctions  will 
be  dealt  with  according  to  the  following  test  pro¬ 
cedure  : 

Upon  either  suspecting  a  control  system  malfunc¬ 
tion  during  routine  maintenance,  or  being  informed 
of  a  suspected  malfunction  that  occurred  during  a 
flight  or  preflight  check-out,  the  maintenance 
technician  acquires  the  fuel  control  ground  sup¬ 
port  test  unit  (GSTU) .  The  ground  test  unit  is 
plugged  into  the  fuel  control  unit  and  the  ground 
support  power  system  electrical  connections.  At 
the  GSTU  control  panel,  main  power  is  switched  on 
and  a  self-test  verification  routine  is  initiated 
by  depressing  the  self-test  switch.  The  six  inter¬ 
locking  mode  switches  are  depressed  consecutively, 
with  any  malfunction  being  indicated  by  excitation 
of  the  red  NO-GO  lamp.  Upon  successful  completion 
of  the  verification  test  (green  GO  lamp  is  lit) , 
the  self-test  switch  is  depressed  to  the  OFF  posi¬ 
tion.  The  GTE  is  now  ready  for  the  operational 
test  of  the  fuel  control.  First,  the  engine  is 
cranked  and,  if  a  successful  start  is  accomplished, 
run  up  to  maximum  allowable  ground  power.  During 
run-up,  acceleration  schedules  will  be  checked. 

For  helicopters,  the  power  limit  is  determined  by 
selecting  a  rotor  collective  pitch  that  allows  the 
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power  turbine  to  be  governed  to  its  selected  speed 
without  causing  the  vehicle  to  lift  off  the  ground. 
Generally,  this  will  be  in  the  region  of  75  to  90% 
engine  speed  depending  on  aircraft  load  and  the 
atmospheric  conditions  prevailing. 

The  operation  of  both  the  power  turbine  and  gas 
producer  governors  can  be  checked  at  this  part- 
power  condition. 

Finally,  a  deceleration  to  ground  idle  completes 
the  fuel  control  test  procedure.  Any  failure  in 
the  fuel  control  unit  will  be  indicated  by  the  red 
NO-GO  lamp  at  the  control  panel.  This  includes 
failure  to  start  the  engine.  Any  failure  indica¬ 
tion  can  be  cleared  for  retest  by  depressing  the 
reset  button.  If  no  failure  is  indicated,  the 
GTE  is  disconnected  and  returned  to  the  crib, 
while  troubleshooting  is  continued  on  the  engine 
and  other  engine  system  components.  If  a  failure 
is  indicated,  the  unit  is  disconnected  and  the 
fuel  control  removed  and  replaced  with  a  unit  from 
stock . 

2.  System  Performance 

It  is  estimated  that  using  GITE,  the  fuel  control 
can  be  checked  out  in  less  than  30  minutes.  No 
special  skills  are  required  to  operate  the  equip¬ 
ment  and,  outside  of  following  simple  operating 
instructions,  no  training  is  required,  providing 
the  equipment  is  not  mishandled,  it  should  operate 
with  a  very  high  degree  of  reliability,  requiring 
a  minimum  of  maintenance  over  the  life  cycle  of 
the  equipment.  If  maintenance  should  be  required, 
then  any  qualified  electronics  technician  with  a 
minimum  of  test  equipment  should  be  able  to  make 
the  repair  at  the  organizational  level.  That  is, 
no  special  facilities  are  required.  Maintenance 
required  on  the  fuel  control  installed  sensors 
would  be  treated  as  a  fuel  control  malfunction 
and  require  the  fuel  control  to  be  removed  and  re¬ 
placed.  The  selection  of  high-reliability  sensors 
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should  minimize  the  impact  of  these  sensors  on  the 
fuel  control  MTBR.  Finally,  the  elimination  of 
unjustified  removals  resulting  from  the  use  of 
this  equipment  will  result;  in  tie  fuel  control 
MTBR  being  increased  from  the  present  rate  of  350- 
400  flight  hours  to  475-540  flight  hours.  This 
is  based  on  eliminating  the  unjustified  removals 
(35%)  presently  being  experienced  on  Army  aircraft. 


137 


SUMMARY  AND  CONCLUSIONS 


The  work  conducted  during  this  program  was  directed  toward 
identifying  fuel  control  system  faults  and  establishing  design 
recommendations  for  Army  gas  turbine  engine  fuel  controls 
which  will  reduce  the  high  rate  of  unjustified  and  unscheduled 
removals  and  increase  the  design  life  of  future  fuel  controls. 

Failure  modes  common  to  present  Army  fuel  control  and  respon¬ 
sible  for  approximately  50%  of  the  justified  removals  were 
identified  based  on  surveys  and  in-house  data.  These  faults 
include  fuel  and  air  contamination  problems,  fuel  seal  leaks, 
drive  spline  wear,  and  improper  adjustments.  Test  and  develop¬ 
ment  work  previously  conducted  indicates  that  chrome-plated, 
Greek  Ascaloy  drive  shafts  will  solve  the  drive  spline  wear 
problem  if  proper  wet  lubrication  is  provided.  Fuel  and  air 
contamination  problems  can  probably  be  solved  by  providing 
ultrafine  filtration.  However,  the  filters  will  be  large,  and 
pneumatic  computer  systems  are  sensitive  to  pressure  losses  in 
the  filter.  The  only  known  solution  to  the  improper  adjustment 
problem  is  to  eliminate  all  external  adjustments.  The  fuel 
seal  problem  will  require  test  and  development  of  various  po¬ 
tential  seal  material  combinations. 

Studies  were  conducted  to  establish  a  cost-effective  fault- 
isolation  scheme  which  would  eliminate  the  30  to  50%  unjusti¬ 
fied  removal  rate  of  fuel  controls.  Based  on  a  life-cycle 
cost  analysis,  it  was  determined  that  a  95%  effective  fault- 
isolation  device  would  be  cost  effective  if  its  selling  price 
was  about  10%  of  the  price  of  the  fuel  control. 

Preliminary  design  studies  of  various  possible  fault-isolation 
concepts  concluded  that  effective  fault  isolation  of  the  con¬ 
trol  can  be  accomplished  only  by  performing  a  functional  test 
of  the  fuel  control  system.  For  present-day  fuel  controls, 
ground  support  type  equipment  which  can  be  shared  by  at  least 
five  aircraft  was  determined  to  be  the  only  cost-effective 
approach  to  fault  isolating  the  fuel  control. 

Studies  completed  on  built-in  fault  isolation  for  an  advanced 
electronic  control  indicated  that  this  concept  could  be  cost 
effective.  Moreover,  future  electronic  control  systems  will 
be  field  replaceable  modular  constructions.  One  of  these 
modules  will  be  the  fuel  pumping  and  metering  section  of  the 
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control.  Fault  isolating  this  module  can  be  done  by  sensing 
the  metering  head  pressure  drop.  Any  fault  in  this  module 
that  results  in  a  malfunction  of  the  engine  will  be  evidenced 
by  a  variation  in  the  pressure  drop  across  the  metering  valve. 

The  potential  exists  for  future  fuel  control  systems  providing 
5,000  hours  of  operation  between  overhauls.  This  can  be  accom¬ 
plished  if  proper  filtration  and  seals  can  be  developed,  if 
recommended  design  improvements  are  introduced  to  eliminate 
generic  faults,  and  if  effective  fault  isolation  is  provided. 
Although  commercial  users  experience  the  same  high  rate  of 
unjustified  removals  as  the  Army,  TBO's  for  fuel  controls  in 
commercial  application  are  in  the  2,500-hour  range,  and  these 
fuel  controls  are  identical  to  those  used  on  Army  gas  turbine 
engines.  It  is  concluded,  therefore,  that  successful  incor¬ 
poration  of  the  recommended  improvements  should  make  the  5,000- 
hour  goal  attainable. 
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